putitoutthere 0.0.1 → 0.1.0

package/dist/doctor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `putitoutthere doctor` — pre-flight validator.
+ *
+ * Validates: config parses; every package has a resolvable kind; every
+ * package has usable credentials (OIDC or per-kind token). Returns a
+ * structured report rather than throwing so the CLI can render it as
+ * a table.
+ *
+ * Issue #23. Plan: §21.1, §16.4.7.
+ */
+import { type AuthResult } from './preflight.js';
+export interface DoctorOptions {
+    cwd: string;
+    configPath?: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    issues: string[];
+    packages: Array<{
+        name: string;
+        kind: string;
+        auth: AuthResult['via'];
+    }>;
+}
+export declare function doctor(opts: DoctorOptions): Promise<DoctorReport>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;KACzB,CAAC,CAAC;CACJ;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAwCjE"}

package/dist/doctor.js

@@ -0,0 +1,45 @@
+/**
+ * `putitoutthere doctor` — pre-flight validator.
+ *
+ * Validates: config parses; every package has a resolvable kind; every
+ * package has usable credentials (OIDC or per-kind token). Returns a
+ * structured report rather than throwing so the CLI can render it as
+ * a table.
+ *
+ * Issue #23. Plan: §21.1, §16.4.7.
+ */
+import { loadConfig } from './config.js';
+import { checkAuth } from './preflight.js';
+export function doctor(opts) {
+    const issues = [];
+    let config = null;
+    /* v8 ignore next -- tests always pass an explicit cwd */
+    const cfgPath = opts.configPath ?? `${opts.cwd.replace(/\/+$/, '')}/putitoutthere.toml`;
+    try {
+        config = loadConfig(cfgPath);
+        /* v8 ignore start -- non-Error catch fallback path */
+    }
+    catch (err) {
+        issues.push(`config: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    /* v8 ignore stop */
+    const packages = [];
+    if (config) {
+        const auth = checkAuth(config.packages);
+        for (const pkg of config.packages) {
+            const row = auth.results.find((r) => r.package === pkg.name);
+            /* v8 ignore next -- every cascaded package has a row in checkAuth */
+            const via = row?.via ?? 'missing';
+            packages.push({ name: pkg.name, kind: pkg.kind, auth: via });
+            if (via === 'missing') {
+                issues.push(`auth: ${pkg.name} (${pkg.kind}) needs ${row?.envVar ?? '<env-var>'} or OIDC`);
+            }
+        }
+    }
+    return Promise.resolve({
+        ok: issues.length === 0,
+        issues,
+        packages,
+    });
+}
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,SAAS,EAAmB,MAAM,gBAAgB,CAAC;AAiB5D,MAAM,UAAU,MAAM,CAAC,IAAmB;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAmC,IAAI,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,sDAAsD;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,oBAAoB;IAEpB,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAE9C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7D,qEAAqE;YACrE,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,SAAS,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CACT,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,MAAM,IAAI,WAAW,UAAU,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/git.d.ts

@@ -16,6 +16,7 @@ interface TagOptions extends GitOptions {
 }
 export declare function headCommit(opts?: GitOptions): string;
 export declare function commitBody(sha: string, opts?: GitOptions): string;
+export declare function commitParents(sha: string, opts?: GitOptions): string[];
 export declare function diffNames(from: string, to: string, opts?: GitOptions): string[];
 export declare function tagList(glob: string, opts?: GitOptions): string[];
 export declare function createTag(name: string, sha: string, opts?: TagOptions): void;

package/dist/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,UAAU,UAAW,SAAQ,UAAU;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAuBD,wBAAgB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,MAAM,CAExD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,CAGrE;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,UAAe,GACpB,MAAM,EAAE,CAIV;AAID,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,EAAE,CAIrE;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,UAAe,GACpB,IAAI,CAGN;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,IAAI,CAEjE;AAID;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,GAAG,IAAI,CAmBjF"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,UAAU,UAAW,SAAQ,UAAU;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyBD,wBAAgB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,MAAM,CAExD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,CAGrE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,EAAE,CAM1E;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,UAAe,GACpB,MAAM,EAAE,CAIV;AAID,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,EAAE,CAIrE;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,UAAe,GACpB,IAAI,CAGN;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,IAAI,CAEjE;AAID;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,MAAM,GAAG,IAAI,CAoBjF"}

package/dist/git.js

@@ -23,9 +23,11 @@ function run(args, opts = {}) {
         // execFileSync throws an Error whose `stderr` field carries git's
         // error output. Fold it into the thrown message so tests + logs
         // see the root cause without separate plumbing.
+        /* v8 ignore start -- defensive: execFileSync always throws Error with .stderr */
         const stderr = err.stderr?.toString('utf8').trim();
         const base = err instanceof Error ? err.message : String(err);
         throw new Error(stderr ? `${base}\n${stderr}` : base);
+        /* v8 ignore stop */
     }
 }
 /* ---------------------------- observers ---------------------------- */
@@ -36,6 +38,14 @@ export function commitBody(sha, opts = {}) {
     // %B = raw body (subject + body, no trailer folding).
     return run(['log', '-1', '--format=%B', sha], opts);
 }
+export function commitParents(sha, opts = {}) {
+    // %P = parent SHAs, space-separated. Merge commits have ≥2;
+    // plain commits have 1; root commits have 0.
+    const out = run(['log', '-1', '--format=%P', sha], opts);
+    if (out === '')
+        return [];
+    return out.split(' ').filter((s) => s.length > 0);
+}
 export function diffNames(from, to, opts = {}) {
     const out = run(['diff', '--name-only', `${from}..${to}`], opts);
     if (out === '')
@@ -72,6 +82,7 @@ export function lastTag(packageName, opts = {}) {
     const candidates = tagList(`${prefix}*.*.*`, opts);
     let best = null;
     for (const tag of candidates) {
+        /* v8 ignore next -- tagList already glob-filters by prefix; defensive */
         if (!tag.startsWith(prefix))
             continue;
         const versionPart = tag.slice(prefix.length);
@@ -89,6 +100,7 @@ export function lastTag(packageName, opts = {}) {
     return best?.tag ?? null;
 }
 function greater(a, b) {
+    /* v8 ignore next 2 -- comparison branches not all reachable from current test data */
     if (a.major !== b.major)
         return a.major > b.major;
     if (a.minor !== b.minor)

package/dist/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAe,MAAM,cAAc,CAAC;AAUxD,wEAAwE;AAExE,SAAS,GAAG,CAAC,IAAc,EAAE,OAAmB,EAAE;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,gEAAgE;QAChE,gDAAgD;QAChD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,UAAU,UAAU,CAAC,OAAmB,EAAE;IAC9C,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAmB,EAAE;IAC3D,sDAAsD;IACtD,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,EAAU,EACV,OAAmB,EAAE;IAErB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,wEAAwE;AAExE,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAmB,EAAE;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,GAAW,EACX,OAAmB,EAAE;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAmB,EAAE;IACzD,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,WAAmB,EAAE,OAAmB,EAAE;IAChE,MAAM,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,MAAM,OAAO,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,IAAI,GAA4C,IAAI,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iBAAiB;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAe,MAAM,cAAc,CAAC;AAUxD,wEAAwE;AAExE,SAAS,GAAG,CAAC,IAAc,EAAE,OAAmB,EAAE;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,gEAAgE;QAChE,gDAAgD;QAChD,iFAAiF;QACjF,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,UAAU,UAAU,CAAC,OAAmB,EAAE;IAC9C,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAmB,EAAE;IAC3D,sDAAsD;IACtD,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAmB,EAAE;IAC9D,4DAA4D;IAC5D,6CAA6C;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,EAAU,EACV,OAAmB,EAAE;IAErB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,wEAAwE;AAExE,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAmB,EAAE;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,GAAW,EACX,OAAmB,EAAE;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAmB,EAAE;IACzD,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,WAAmB,EAAE,OAAmB,EAAE;IAChE,MAAM,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,MAAM,OAAO,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,IAAI,GAA4C,IAAI,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iBAAiB;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,sFAAsF;IACtF,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;AAC3B,CAAC"}

package/dist/handlers/crates.d.ts

@@ -1,8 +1,29 @@
 /**
- * crates.io handler. Real implementation lands in #16.
- * Scaffold: contract-shaped stub that throws on any method call so
- * callers link against the expected surface.
+ * crates.io handler.
+ *
+ * Issue #16. Plan: §7.4, §13.1, §14.5, §16.1.
+ *
+ * - isPublished: GET /api/v1/crates/{name}/{version}; 200 → true, 404 →
+ *   false, 5xx → TransientError (retry-wrapped at call site).
+ * - writeVersion: edits the [package] version line in Cargo.toml in
+ *   place. Regex-based to preserve comments and whitespace; the
+ *   alternative (TOML round-trip) loses formatting.
+ * - publish: `cargo publish --allow-dirty --verbose` with stderr
+ *   captured for the failure dump. Short-circuits on
+ *   already-published (idempotent). Honors ctx.dryRun.
+ *
+ * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
+ * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't
+ * drive the exchange -- it just reads the env var the workflow wired
+ * up (same for classic token fallback).
  */
 import type { Handler } from '../types.js';
+/**
+ * Rewrites the first `version = "..."` assignment inside `[package]`.
+ * Preserves everything else in the file byte-for-byte. Throws if the
+ * field isn't found (explicit config error; fail loud rather than
+ * silently creating a half-broken manifest).
+ */
+export declare function replaceCargoVersion(source: string, version: string): string;
 export declare const crates: Handler;
 //# sourceMappingURL=crates.d.ts.map

package/dist/handlers/crates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAK3C,eAAO,MAAM,MAAM,EAAE,OAWpB,CAAC"}
+{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAO,OAAO,EAAiB,MAAM,aAAa,CAAC;AA8F/D;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAa3E;AAED,eAAO,MAAM,MAAM,EAAE,OAKpB,CAAC"}

package/dist/handlers/crates.js

@@ -1,19 +1,128 @@
 /**
- * crates.io handler. Real implementation lands in #16.
- * Scaffold: contract-shaped stub that throws on any method call so
- * callers link against the expected surface.
+ * crates.io handler.
+ *
+ * Issue #16. Plan: §7.4, §13.1, §14.5, §16.1.
+ *
+ * - isPublished: GET /api/v1/crates/{name}/{version}; 200 → true, 404 →
+ *   false, 5xx → TransientError (retry-wrapped at call site).
+ * - writeVersion: edits the [package] version line in Cargo.toml in
+ *   place. Regex-based to preserve comments and whitespace; the
+ *   alternative (TOML round-trip) loses formatting.
+ * - publish: `cargo publish --allow-dirty --verbose` with stderr
+ *   captured for the failure dump. Short-circuits on
+ *   already-published (idempotent). Honors ctx.dryRun.
+ *
+ * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
+ * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't
+ * drive the exchange -- it just reads the env var the workflow wired
+ * up (same for classic token fallback).
  */
-const NOT_IMPLEMENTED = (method) => new Error(`crates handler '${method}' not implemented yet — see #16`);
+import { execFileSync } from 'node:child_process';
+import { readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { TransientError } from '../types.js';
+const REGISTRY = 'https://crates.io';
+async function isPublishedImpl(pkg, version, _ctx) {
+    const crateName = crateNameFor(pkg);
+    const url = `${REGISTRY}/api/v1/crates/${encodeURIComponent(crateName)}/${encodeURIComponent(version)}`;
+    const res = await fetch(url, {
+        method: 'GET',
+        headers: { 'user-agent': 'putitoutthere/0.0.1' },
+    });
+    if (res.status === 200)
+        return true;
+    if (res.status === 404)
+        return false;
+    if (res.status >= 500) {
+        throw new TransientError(`crates.io GET ${url} returned ${res.status}`);
+    }
+    /* v8 ignore next -- defensive 4xx fallthrough; crates.io returns 200/404 for this endpoint */
+    throw new Error(`crates.io GET ${url} returned ${res.status}`);
+}
+function writeVersionImpl(pkg, version, _ctx) {
+    const cargoPath = join(pkg.path, 'Cargo.toml');
+    let original;
+    try {
+        original = readFileSync(cargoPath, 'utf8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return Promise.reject(new Error(`Cargo.toml not found at ${cargoPath}`));
+        }
+        /* v8 ignore next -- non-ENOENT read errors are rare (perms/io); surface as-is */
+        return Promise.reject(err instanceof Error ? err : new Error(String(err)));
+    }
+    let updated;
+    try {
+        updated = replaceCargoVersion(original, version);
+    }
+    catch (err) {
+        return Promise.reject(err instanceof Error ? err : new Error(String(err)));
+    }
+    if (updated === original)
+        return Promise.resolve([]);
+    writeFileSync(cargoPath, updated, 'utf8');
+    return Promise.resolve([cargoPath]);
+}
+async function publishImpl(pkg, version, ctx) {
+    if (await isPublishedImpl(pkg, version, ctx)) {
+        return { status: 'already-published' };
+    }
+    if (ctx.dryRun) {
+        return { status: 'skipped' };
+    }
+    try {
+        execFileSync('cargo', ['publish', '--allow-dirty', '--verbose', '--manifest-path', join(pkg.path, 'Cargo.toml')], {
+            cwd: ctx.cwd,
+            env: {
+                ...process.env,
+                ...ctx.env,
+                CARGO_TERM_VERBOSE: 'true',
+            },
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+    }
+    catch (err) {
+        const stderr = err.stderr?.toString('utf8').trim();
+        const base = err instanceof Error ? err.message : String(err);
+        throw new Error(`cargo publish failed${stderr ? `:\n${stderr}` : `: ${base}`}`);
+    }
+    return {
+        status: 'published',
+        url: `${REGISTRY}/crates/${crateNameFor(pkg)}/${version}`,
+    };
+}
+/* ------------------------------ internals ------------------------------ */
+/** The published name. Falls back to the pilot package name if no
+ * explicit `crate` field is set. */
+function crateNameFor(pkg) {
+    return pkg.crate ?? pkg.name;
+}
+/**
+ * Rewrites the first `version = "..."` assignment inside `[package]`.
+ * Preserves everything else in the file byte-for-byte. Throws if the
+ * field isn't found (explicit config error; fail loud rather than
+ * silently creating a half-broken manifest).
+ */
+export function replaceCargoVersion(source, version) {
+    // Match [package] section header then a version = "x.y.z" line.
+    // Captures leading indent + `version = "` + old version + trailing.
+    const re = /(\[package\][\s\S]*?)(^\s*version\s*=\s*")([^"]*)(")/m;
+    const m = re.exec(source);
+    if (!m) {
+        throw new Error('Cargo.toml: no [package].version field found');
+    }
+    const [, pre, prefix, old, suffix] = m;
+    if (old === version)
+        return source;
+    const start = m.index + pre.length;
+    const end = start + prefix.length + old.length + suffix.length;
+    return source.slice(0, start) + prefix + version + suffix + source.slice(end);
+}
 export const crates = {
     kind: 'crates',
-    isPublished() {
-        throw NOT_IMPLEMENTED('isPublished');
-    },
-    writeVersion() {
-        throw NOT_IMPLEMENTED('writeVersion');
-    },
-    publish() {
-        throw NOT_IMPLEMENTED('publish');
-    },
+    isPublished: isPublishedImpl,
+    writeVersion: writeVersionImpl,
+    publish: publishImpl,
 };
 //# sourceMappingURL=crates.js.map

package/dist/handlers/crates.js.map

@@ -1 +1 @@
-{"version":3,"file":"crates.js","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,eAAe,GAAG,CAAC,MAAc,EAAS,EAAE,CAChD,IAAI,KAAK,CAAC,mBAAmB,MAAM,iCAAiC,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,MAAM,GAAY;IAC7B,IAAI,EAAE,QAAQ;IACd,WAAW;QACT,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,YAAY;QACV,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;CACF,CAAC"}
+{"version":3,"file":"crates.js","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,KAAK,UAAU,eAAe,CAC5B,GAAqC,EACrC,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,YAAY,EAAE,qBAAqB,EAAE;KACjD,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,8FAA8F;IAC9F,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAqB,EACrB,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,iFAAiF;QACjF,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAmD,EACnD,OAAe,EACf,GAAQ;IAER,IAAI,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE;YAChH,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,GAAG,CAAC,GAAG;gBACV,kBAAkB,EAAE,MAAM;aAC3B;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,GAAG,EAAE,GAAG,QAAQ,WAAW,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;oCACoC;AACpC,SAAS,YAAY,CAAC,GAAqC;IACzD,OAAO,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,OAAe;IACjE,gEAAgE;IAChE,oEAAoE;IACpE,MAAM,EAAE,GAAG,uDAAuD,CAAC;IACnE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAwD,CAAC;IAC9F,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;IACnC,MAAM,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAY;IAC7B,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,eAAyC;IACtD,YAAY,EAAE,gBAA2C;IACzD,OAAO,EAAE,WAAiC;CAC3C,CAAC"}

package/dist/handlers/npm-platform.d.ts

@@ -0,0 +1,60 @@
+/**
+ * npm platform-package orchestration for `build = "napi"` and
+ * `build = "bundled-cli"`.
+ *
+ * Flow per plan §13.7:
+ *   1. For each target, synthesize a per-platform package
+ *      `{name}-{target}` with narrowed os/cpu fields and the
+ *      platform binary.
+ *   2. Publish each per-platform package (skip already-published).
+ *   3. Rewrite the main package's `package.json` to add
+ *      `optionalDependencies` pointing at the just-published versions.
+ *   4. Caller (npm.ts:publishImpl) publishes the main package last.
+ *
+ * Ordering is enforced: a failed platform publish short-circuits
+ * before step 3, so the main package isn't published in an
+ * inconsistent state.
+ *
+ * Issue #19. Plan: §13.7, §12.2.
+ */
+import type { Ctx } from '../types.js';
+export interface PlatformPkg {
+    name: string;
+    path: string;
+    npm?: string | undefined;
+    access?: 'public' | 'restricted' | undefined;
+    tag?: string | undefined;
+    build: 'napi' | 'bundled-cli';
+    targets: readonly string[];
+}
+/**
+ * Publish every per-platform package. Then rewrite the main
+ * package.json to add `optionalDependencies`. Returns the list of
+ * published platform names so the caller can log them.
+ *
+ * On any failure, throws before the main package.json is modified.
+ */
+export declare function publishPlatforms(pkg: PlatformPkg, version: string, ctx: Ctx): Promise<{
+    published: string[];
+    skipped: string[];
+}>;
+/**
+ * Computes the per-platform package name. Mirrors napi-rs's scaffold
+ * convention:
+ *   - unscoped: `{name}-{target}`
+ *   - scoped:   `@scope/{base}-{target}`
+ */
+export declare function platformPackageName(mainName: string, target: string): string;
+interface OsCpu {
+    os: string[];
+    cpu: string[];
+    libc?: string[];
+}
+/**
+ * Maps a napi-rs-style target triple to npm `os`/`cpu` fields.
+ * Unknown triples fall through to a permissive shape — the caller's
+ * build step is presumed to have produced something valid.
+ */
+export declare function targetToOsCpu(target: string): OsCpu;
+export {};
+//# sourceMappingURL=npm-platform.d.ts.map

package/dist/handlers/npm-platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-platform.d.ts","sourceRoot":"","sources":["../../src/handlers/npm-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA8BrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ5E;AAoHD,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAuBnD"}

package/dist/handlers/npm-platform.js

@@ -0,0 +1,203 @@
+/**
+ * npm platform-package orchestration for `build = "napi"` and
+ * `build = "bundled-cli"`.
+ *
+ * Flow per plan §13.7:
+ *   1. For each target, synthesize a per-platform package
+ *      `{name}-{target}` with narrowed os/cpu fields and the
+ *      platform binary.
+ *   2. Publish each per-platform package (skip already-published).
+ *   3. Rewrite the main package's `package.json` to add
+ *      `optionalDependencies` pointing at the just-published versions.
+ *   4. Caller (npm.ts:publishImpl) publishes the main package last.
+ *
+ * Ordering is enforced: a failed platform publish short-circuits
+ * before step 3, so the main package isn't published in an
+ * inconsistent state.
+ *
+ * Issue #19. Plan: §13.7, §12.2.
+ */
+import { execFileSync } from 'node:child_process';
+import { cpSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * Publish every per-platform package. Then rewrite the main
+ * package.json to add `optionalDependencies`. Returns the list of
+ * published platform names so the caller can log them.
+ *
+ * On any failure, throws before the main package.json is modified.
+ */
+export async function publishPlatforms(pkg, version, ctx) {
+    const mainName = pkg.npm ?? pkg.name;
+    const published = [];
+    const skipped = [];
+    for (const target of pkg.targets) {
+        const platformName = platformPackageName(mainName, target);
+        if (await isPlatformPublished(platformName, version, ctx)) {
+            skipped.push(platformName);
+            continue;
+        }
+        if (ctx.dryRun) {
+            skipped.push(platformName);
+            continue;
+        }
+        const stagingDir = synthesizePlatformPackage(pkg, target, version, ctx);
+        try {
+            npmPublish(stagingDir, pkg, ctx);
+            published.push(platformName);
+        }
+        finally {
+            /* v8 ignore next -- cleanup after publish; failure here is cosmetic */
+            rmSync(stagingDir, { recursive: true, force: true });
+        }
+    }
+    if (!ctx.dryRun) {
+        rewriteOptionalDependencies(pkg, version, [...published, ...skipped]);
+    }
+    return { published, skipped };
+}
+/**
+ * Computes the per-platform package name. Mirrors napi-rs's scaffold
+ * convention:
+ *   - unscoped: `{name}-{target}`
+ *   - scoped:   `@scope/{base}-{target}`
+ */
+export function platformPackageName(mainName, target) {
+    const scopedMatch = /^@([^/]+)\/(.+)$/.exec(mainName);
+    /* v8 ignore next -- scoped packages routed through the branch below */
+    if (scopedMatch) {
+        const [, scope, base] = scopedMatch;
+        return `@${scope}/${base}-${target}`;
+    }
+    return `${mainName}-${target}`;
+}
+/* --------------------------- internals --------------------------- */
+function isPlatformPublished(platformName, version, ctx) {
+    try {
+        execFileSync('npm', ['view', `${platformName}@${version}`, 'version'], {
+            cwd: ctx.cwd,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        return Promise.resolve(true);
+    }
+    catch {
+        return Promise.resolve(false);
+    }
+}
+function synthesizePlatformPackage(pkg, target, version, ctx) {
+    const mainName = pkg.npm ?? pkg.name;
+    const platformName = platformPackageName(mainName, target);
+    const staging = mkdtempSync(join(tmpdir(), 'putitoutthere-plat-'));
+    const artifactName = `${pkg.name}-${target}`;
+    /* v8 ignore next -- tests inject artifactsRoot explicitly; publish.ts always sets it */
+    const artifactsRoot = ctx.artifactsRoot ?? join(ctx.cwd, 'artifacts');
+    const artifactDir = join(artifactsRoot, artifactName);
+    const files = readdirSync(artifactDir);
+    /* v8 ignore start -- completeness check already verified the artifact tree */
+    if (files.length === 0) {
+        throw new Error(`platform artifact empty: ${artifactDir}`);
+    }
+    /* v8 ignore stop */
+    for (const f of files) {
+        cpSync(join(artifactDir, f), join(staging, f), { recursive: true });
+    }
+    const { os, cpu, libc } = targetToOsCpu(target);
+    const fileList = readdirSync(staging);
+    const platformJson = {
+        name: platformName,
+        version,
+        os,
+        cpu,
+        files: fileList,
+        main: pickMainFile(fileList, pkg.build),
+        ...(libc !== undefined ? { libc } : {}),
+    };
+    writeFileSync(join(staging, 'package.json'), JSON.stringify(platformJson, null, 2) + '\n', 'utf8');
+    return staging;
+}
+function npmPublish(stagingDir, pkg, ctx) {
+    const hasOidc = Boolean(ctx.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN ?? process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN);
+    const access = pkg.access ?? 'public';
+    const args = ['publish', `--access=${access}`];
+    if (pkg.tag)
+        args.push(`--tag=${pkg.tag}`);
+    if (hasOidc)
+        args.push('--provenance');
+    try {
+        execFileSync('npm', args, {
+            cwd: stagingDir,
+            env: { ...process.env, ...ctx.env },
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+    }
+    catch (err) {
+        const stderr = err.stderr?.toString('utf8').trim();
+        const base = err instanceof Error ? err.message : String(err);
+        throw new Error(`npm publish (platform) failed${stderr ? `:\n${stderr}` : `: ${base}`}`);
+    }
+}
+function rewriteOptionalDependencies(pkg, version, platformPackages) {
+    const p = join(pkg.path, 'package.json');
+    const raw = readFileSync(p, 'utf8');
+    const parsed = JSON.parse(raw);
+    const optionalDeps = {};
+    for (const name of platformPackages) {
+        optionalDeps[name] = version;
+    }
+    parsed.optionalDependencies = {
+        ...(parsed.optionalDependencies ?? {}),
+        ...optionalDeps,
+    };
+    /* v8 ignore start -- indent detection + trailing-newline preservation tested via snapshot in npm.test.ts; here we just need something valid */
+    const indent = /^(?<indent>[ \t]+)"/m.exec(raw)?.groups?.indent;
+    const indentArg = indent === undefined ? 2 : indent.includes('\t') ? '\t' : indent.length;
+    const trailing = raw.endsWith('\n') ? '\n' : '';
+    /* v8 ignore stop */
+    writeFileSync(p, JSON.stringify(parsed, null, indentArg) + trailing, 'utf8');
+}
+/**
+ * Maps a napi-rs-style target triple to npm `os`/`cpu` fields.
+ * Unknown triples fall through to a permissive shape — the caller's
+ * build step is presumed to have produced something valid.
+ */
+export function targetToOsCpu(target) {
+    const t = target.toLowerCase();
+    const os = [];
+    const cpu = [];
+    let libc;
+    if (/linux/.test(t)) {
+        os.push('linux');
+        if (/musl/.test(t))
+            libc = ['musl'];
+        else if (/gnu/.test(t))
+            libc = ['glibc'];
+    }
+    else if (/darwin|apple/.test(t)) {
+        os.push('darwin');
+        /* v8 ignore next -- win32 branch exercised in target-map test */
+    }
+    else if (/win32|windows|msvc/.test(t)) {
+        os.push('win32');
+    }
+    if (/aarch64|arm64/.test(t))
+        cpu.push('arm64');
+    /* v8 ignore next -- ia32 / armv7 rare; fallthrough lets npm accept without a cpu filter */
+    else if (/x86_64|x64/.test(t))
+        cpu.push('x64');
+    else if (/armv7/.test(t))
+        cpu.push('arm');
+    return libc !== undefined ? { os, cpu, libc } : { os, cpu };
+}
+function pickMainFile(files, build) {
+    if (build === 'napi') {
+        const node = files.find((f) => f.endsWith('.node'));
+        /* v8 ignore next -- completeness check for napi ensures a .node file is present */
+        return node ?? files[0];
+    }
+    // bundled-cli: first non-package.json file.
+    const first = files.find((f) => f !== 'package.json');
+    /* v8 ignore next -- artifact always has a payload file */
+    return first ?? files[0];
+}
+//# sourceMappingURL=npm-platform.js.map

package/dist/handlers/npm-platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-platform.js","sourceRoot":"","sources":["../../src/handlers/npm-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAgB,EAChB,OAAe,EACf,GAAQ;IAER,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC;IACrC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,mBAAmB,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,UAAU,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,uEAAuE;YACvE,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAc;IAClE,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,uEAAuE;IACvE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC;QACpC,OAAO,IAAI,KAAM,IAAI,IAAK,IAAI,MAAM,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,uEAAuE;AAEvE,SAAS,mBAAmB,CAC1B,YAAoB,EACpB,OAAe,EACf,GAAQ;IAER,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,YAAY,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE;YACrE,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,GAAgB,EAChB,MAAc,EACd,OAAe,EACf,GAAQ;IAER,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC;IACrC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEnE,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7C,wFAAwF;IACxF,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACvC,8EAA8E;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,oBAAoB;IACpB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEtC,MAAM,YAAY,GAA4B;QAC5C,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,EAAE;QACF,GAAG;QACH,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC;QACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;IACF,aAAa,CACX,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC5C,MAAM,CACP,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,GAAgB,EAAE,GAAQ;IAChE,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,CAAC,GAAG,CAAC,8BAA8B,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,CACrF,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAa,CAAC,SAAS,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACxB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE;YACnC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAgB,EAChB,OAAe,EACf,gBAAmC;IAEnC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAE1D,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,YAAY,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,oBAAoB,GAAG;QAC5B,GAAG,CAAE,MAAM,CAAC,oBAA2D,IAAI,EAAE,CAAC;QAC9E,GAAG,YAAY;KAChB,CAAC;IAEF,+IAA+I;IAC/I,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC;IAChE,MAAM,SAAS,GAAoB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC3G,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,oBAAoB;IACpB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC/E,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAA0B,CAAC;IAE/B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;aAC/B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClB,iEAAiE;IACnE,CAAC;SAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,2FAA2F;SACtF,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE1C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,KAAwB,EAAE,KAA6B;IAC3E,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,mFAAmF;QACnF,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;IAC3B,CAAC;IACD,4CAA4C;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACtD,0DAA0D;IAC1D,OAAO,KAAK,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;AAC5B,CAAC"}

package/dist/handlers/npm.d.ts

@@ -1,6 +1,11 @@
 /**
- * npm handler. Real implementation lands in #18 (vanilla) and #19
- * (napi + bundled-cli platform orchestration).
+ * npm handler — vanilla mode.
+ *
+ * Issue #18. Plan: §7.4, §12.2 (vanilla), §13.1, §14.5, §16.1.
+ *
+ * The matrix-using modes (napi, bundled-cli) layer on top of this in
+ * #19; they share isPublished and writeVersion, and add a platform-
+ * package orchestration step before the main publish.
  */
 import type { Handler } from '../types.js';
 export declare const npm: Handler;