putitoutthere 0.1.43 → 0.1.45

package/dist/doctor.js

@@ -1,292 +0,0 @@
-/**
- * `putitoutthere doctor` — pre-flight validator.
- *
- * Validates: config parses; every package has a resolvable kind; every
- * package has usable credentials (OIDC or per-kind token). Returns a
- * structured report rather than throwing so the CLI can render it as
- * a table.
- *
- * When `checkArtifacts` is on, also walks the plan and checks each
- * expected artifact directory. Silent-skips when plan can't run (no
- * git state / no commits) so `doctor` stays useful in contexts that
- * don't have a release history yet.
- *
- * Issue #23. Plan: §21.1, §16.4.7. Artifact check: #89.
- */
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { expectedLayout } from './completeness.js';
-import { loadConfig } from './config.js';
-import { checkEnvironment, checkPermissions, checkPublishInvocation, diffEnvironment, diffWorkflowFilename, findPublishWorkflows, inferFromGithubWorkflowRef, } from './oidc-policy.js';
-import { diffCratesTrust, fetchCratesTrustPolicy, } from './registries/crates-trust.js';
-import { plan } from './plan.js';
-import { checkAuth } from './preflight.js';
-import { deepCheck } from './token-scope.js';
-export async function doctor(opts) {
-    const issues = [];
-    let config = null;
-    /* v8 ignore next -- tests always pass an explicit cwd */
-    const cfgPath = opts.configPath ?? `${opts.cwd.replace(/\/+$/, '')}/putitoutthere.toml`;
-    try {
-        config = loadConfig(cfgPath);
-        /* v8 ignore start -- non-Error catch fallback path */
-    }
-    catch (err) {
-        issues.push(`config: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    /* v8 ignore stop */
-    const packages = [];
-    if (config) {
-        const auth = checkAuth(config.packages);
-        for (const pkg of config.packages) {
-            const row = auth.results.find((r) => r.package === pkg.name);
-            /* v8 ignore next -- every cascaded package has a row in checkAuth */
-            const via = row?.via ?? 'missing';
-            packages.push({ name: pkg.name, kind: pkg.kind, auth: via });
-            if (via === 'missing') {
-                issues.push(`auth: ${pkg.name} (${pkg.kind}) needs ${row?.acceptedEnvVars.join(' or ') ?? '<env-var>'} or OIDC`);
-            }
-        }
-        if (opts.deep) {
-            const scopable = config.packages.filter((p) => {
-                const r = auth.results.find((x) => x.package === p.name);
-                return r !== undefined && r.via === 'token';
-            });
-            const envVarForPackage = new Map();
-            for (const p of scopable) {
-                const r = auth.results.find((x) => x.package === p.name);
-                /* v8 ignore next -- filter above guarantees a row */
-                if (r !== undefined)
-                    envVarForPackage.set(p.name, r.envVar);
-            }
-            const rows = await deepCheck({
-                packages: scopable,
-                envVarForPackage,
-                ...(opts.inspectFn !== undefined ? { inspect: opts.inspectFn } : {}),
-            });
-            for (const row of rows) {
-                const pkgEntry = packages.find((p) => p.name === row.package);
-                /* v8 ignore next -- deepCheck rows always correspond to a scoped package */
-                if (pkgEntry === undefined)
-                    continue;
-                pkgEntry.scope = row.scope;
-                pkgEntry.scope_match = row.match;
-                if (row.match === 'mismatch' || row.match === 'error') {
-                    issues.push(`scope: ${row.package} (${row.kind}) — ${row.detail ?? 'token scope does not match config'}`);
-                }
-            }
-        }
-    }
-    const artifacts = opts.checkArtifacts && config
-        ? await checkArtifacts(opts, cfgPath, issues)
-        : undefined;
-    const workflows = findPublishWorkflows(opts.cwd);
-    const trustPolicy = checkTrustPolicyLocal(workflows, issues);
-    const trustPolicyDeclared = config
-        ? checkTrustPolicyDeclared(config.packages, workflows, issues)
-        : undefined;
-    const trustPolicyCratesIo = config
-        ? await checkTrustPolicyCratesIo(config.packages, issues, opts.cratesIoFetch)
-        : undefined;
-    return {
-        ok: issues.length === 0,
-        issues,
-        packages,
-        ...(artifacts !== undefined ? { artifacts } : {}),
-        ...(trustPolicy !== undefined ? { trustPolicy } : {}),
-        ...(trustPolicyDeclared !== undefined ? { trustPolicyDeclared } : {}),
-        ...(trustPolicyCratesIo !== undefined ? { trustPolicyCratesIo } : {}),
-    };
-}
-/**
- * Trust-policy (local) phase. Additive; runs after auth-availability.
- * Deferred to a follow-up: filename-vs-registry diff and environment-
- * name-vs-registry diff (Option C of #162).
- */
-function checkTrustPolicyLocal(workflows, issues) {
-    if (workflows.length === 0)
-        return undefined;
-    const report = { workflows: [] };
-    for (const wf of workflows) {
-        const wfIssues = [];
-        const invocation = checkPublishInvocation(wf);
-        if (invocation !== null) {
-            wfIssues.push(`trust-policy: ${wf.filename}: no clearly-identifiable publish step (commented out?)`);
-        }
-        const perms = checkPermissions(wf);
-        for (const p of perms) {
-            wfIssues.push(`trust-policy: ${wf.filename}: job \`${p.job}\` is missing \`${p.permission}\` permission — add it to the job or to workflow-level \`permissions:\``);
-        }
-        const env = checkEnvironment(wf);
-        if (env !== null) {
-            wfIssues.push(`trust-policy: ${wf.filename}: job \`${env.job}\` has no \`environment:\` key — many trust policies pin an environment; add one (e.g. \`environment: release\`) matching the registry registration`);
-        }
-        for (const line of wfIssues)
-            issues.push(line);
-        report.workflows.push({
-            filename: wf.filename,
-            permissions_ok: perms.length === 0,
-            environment_ok: env === null,
-            invocation_ok: invocation === null,
-            issues: wfIssues,
-        });
-    }
-    return report;
-}
-/**
- * Exported for CLI rendering: the explicit "what's NOT checked" line
- * we surface below the trust-policy phase so a green doctor output
- * doesn't imply the filename landmine is caught.
- */
-export const TRUST_POLICY_SCOPE_NOTE = 'note: declare `[package.trust_policy]` to have `doctor` diff workflow + environment against the config. Registry cross-check is crates.io-only (set `CRATES_IO_DOCTOR_TOKEN`); PyPI and npm are declaration-only.';
-/**
- * Declared-diff phase (#189). For each package with a `[package.trust_policy]`
- * block, diffs the declaration against:
- *  - the local workflow file that `findPublishWorkflows` identified
- *  - `GITHUB_WORKFLOW_REF` when running inside Actions
- * Returns `undefined` when no package has a declaration.
- */
-function checkTrustPolicyDeclared(packages, workflows, issues) {
-    const declared = packages.filter((p) => p.trust_policy !== undefined);
-    if (declared.length === 0)
-        return undefined;
-    const report = { packages: [] };
-    const localWorkflow = workflows[0]?.filename;
-    const inferred = inferFromGithubWorkflowRef();
-    for (const pkg of declared) {
-        const policy = pkg.trust_policy;
-        /* v8 ignore next -- filter guarantees trust_policy is set */
-        if (policy === undefined)
-            continue;
-        const pkgIssues = [];
-        let workflowOk = true;
-        let environmentOk = true;
-        let refOk = true;
-        if (localWorkflow !== undefined) {
-            const mismatch = diffWorkflowFilename(policy.workflow, localWorkflow);
-            if (mismatch !== null) {
-                workflowOk = false;
-                pkgIssues.push(renderWorkflowMismatch(pkg.name, mismatch));
-            }
-        }
-        if (policy.environment !== undefined) {
-            for (const wf of workflows) {
-                const envMismatch = diffEnvironment(policy.environment, wf);
-                if (envMismatch !== null) {
-                    environmentOk = false;
-                    pkgIssues.push(renderEnvironmentMismatch(pkg.name, envMismatch));
-                    break;
-                }
-            }
-        }
-        if (inferred !== null && inferred.workflow !== policy.workflow) {
-            refOk = false;
-            pkgIssues.push(`trust-policy: ${pkg.name}: GITHUB_WORKFLOW_REF says the running workflow is ${inferred.workflow}, but [package.trust_policy].workflow is ${policy.workflow}`);
-        }
-        for (const line of pkgIssues)
-            issues.push(line);
-        report.packages.push({
-            name: pkg.name,
-            workflow_ok: workflowOk,
-            environment_ok: environmentOk,
-            ref_ok: refOk,
-            issues: pkgIssues,
-        });
-    }
-    return report;
-}
-function renderWorkflowMismatch(pkgName, m) {
-    return `trust-policy: ${pkgName}: declared workflow ${m.declared} does not match local workflow ${m.actual} — update [package.trust_policy].workflow or rename the workflow file back`;
-}
-function renderEnvironmentMismatch(pkgName, m) {
-    const actual = m.actual ?? '(none)';
-    return `trust-policy: ${pkgName}: declared environment ${m.declared} does not match workflow ${m.workflow}'s environment ${actual}`;
-}
-/**
- * Opt-in crates.io cross-check (#189). Silent-skip when
- * `CRATES_IO_DOCTOR_TOKEN` is unset. For each `kind = "crates"` package
- * with a declared `trust_policy`, fetches the registered configs and
- * diffs against the declaration. Transient failures are neutral-skipped
- * so a bad crates.io minute doesn't turn doctor red; 401 fails.
- */
-async function checkTrustPolicyCratesIo(packages, issues, fetchFn = fetchCratesTrustPolicy) {
-    const crates = packages.filter((p) => p.kind === 'crates' && p.trust_policy !== undefined);
-    if (crates.length === 0)
-        return undefined;
-    const token = process.env.CRATES_IO_DOCTOR_TOKEN;
-    if (token === undefined || token.length === 0) {
-        return {
-            status: 'skipped',
-            reason: 'set CRATES_IO_DOCTOR_TOKEN to enable crates.io trust-policy cross-check',
-            crates: [],
-        };
-    }
-    const report = { status: 'ran', crates: [] };
-    for (const pkg of crates) {
-        const crateName = pkg.name;
-        const result = await fetchFn(crateName, token);
-        if (result.kind === 'skip-transient') {
-            report.crates.push({ name: crateName, status: 'skip-transient', reason: result.reason });
-            continue;
-        }
-        if (result.kind === 'auth-failed') {
-            report.crates.push({ name: crateName, status: 'auth-failed', reason: result.reason });
-            issues.push(`trust-policy: ${crateName}: ${result.reason}`);
-            continue;
-        }
-        const policy = pkg.trust_policy;
-        const mismatches = diffCratesTrust(crateName, {
-            workflow: policy.workflow,
-            ...(policy.environment !== undefined ? { environment: policy.environment } : {}),
-            ...(policy.repository !== undefined ? { repository: policy.repository } : {}),
-        }, result.configs);
-        if (mismatches.length === 0) {
-            report.crates.push({ name: crateName, status: 'ok' });
-        }
-        else {
-            report.crates.push({ name: crateName, status: 'mismatch', mismatches });
-            for (const m of mismatches) {
-                issues.push(`trust-policy: ${crateName}: crates.io has ${m.field} = ${m.registered ?? '(none)'}, config declares ${m.declared}`);
-            }
-        }
-    }
-    return report;
-}
-async function checkArtifacts(opts, cfgPath, issues) {
-    let matrix;
-    try {
-        matrix = (await plan({ cwd: opts.cwd, configPath: cfgPath }));
-    }
-    catch (err) {
-        // Plan needs a git repo with at least one commit. In a scratch
-        // checkout (no git state yet) we can't walk the plan at all, so
-        // we note it as a soft issue and move on.
-        /* v8 ignore next -- non-Error catch fallback path */
-        const message = err instanceof Error ? err.message : String(err);
-        issues.push(`artifacts: cannot walk plan (${message})`);
-        return [];
-    }
-    const root = join(opts.cwd, 'artifacts');
-    const rows = [];
-    for (const row of matrix) {
-        // Vanilla npm publishes from the source tree; there's no separate
-        // artifact dir to check. Mirrors completeness.ts's carve-out.
-        if (row.kind === 'npm' && row.target === 'noarch')
-            continue;
-        const dir = join(root, row.artifact_name);
-        const present = existsSync(dir);
-        const expected = expectedLayout(row);
-        rows.push({
-            package: row.name,
-            target: row.target,
-            artifact_name: row.artifact_name,
-            present,
-            expected,
-        });
-        if (!present) {
-            issues.push(`artifacts: ${row.name} (${row.target}) missing; expected ${expected}`);
-        }
-    }
-    return rows;
-}
-//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,GAI3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,sBAAsB,GAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAmB,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAqC,MAAM,kBAAkB,CAAC;AA6FhF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAmC,IAAI,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,sDAAsD;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,oBAAoB;IAEpB,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAE9C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7D,qEAAqE;YACrE,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,SAAS,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CACT,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,UAAU,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzD,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzD,qDAAqD;gBACrD,IAAI,CAAC,KAAK,SAAS;oBAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,gBAAgB;gBAChB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9D,4EAA4E;gBAC5E,IAAI,QAAQ,KAAK,SAAS;oBAAE,SAAS;gBACrC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBAC3B,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;gBACjC,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACtD,MAAM,CAAC,IAAI,CACT,UAAU,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,IAAI,mCAAmC,EAAE,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM;QAC7C,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,MAAM;QAChC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,mBAAmB,GAAG,MAAM;QAChC,CAAC,CAAC,MAAM,wBAAwB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC;QAC7E,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,SAAkC,EAClC,MAAgB;IAEhB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,MAAM,MAAM,GAAsB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACX,iBAAiB,EAAE,CAAC,QAAQ,yDAAyD,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CACX,iBAAiB,EAAE,CAAC,QAAQ,WAAW,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,UAAU,yEAAyE,CACrJ,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CACX,iBAAiB,EAAE,CAAC,QAAQ,WAAW,GAAG,CAAC,GAAG,qJAAqJ,CACpM,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,cAAc,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC;YAClC,cAAc,EAAE,GAAG,KAAK,IAAI;YAC5B,aAAa,EAAE,UAAU,KAAK,IAAI;YAClC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,mNAAmN,CAAC;AAEtN;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,QAA4B,EAC5B,SAAkC,EAClC,MAAgB;IAEhB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAA8B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3D,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,6DAA6D;QAC7D,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACtE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,GAAG,KAAK,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACzB,aAAa,GAAG,KAAK,CAAC;oBACtB,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;oBACjE,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/D,KAAK,GAAG,KAAK,CAAC;YACd,SAAS,CAAC,IAAI,CACZ,iBAAiB,GAAG,CAAC,IAAI,sDAAsD,QAAQ,CAAC,QAAQ,4CAA4C,MAAM,CAAC,QAAQ,EAAE,CAC9J,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,aAAa;YAC7B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,CAA2B;IAC1E,OAAO,iBAAiB,OAAO,uBAAuB,CAAC,CAAC,QAAQ,kCAAkC,CAAC,CAAC,MAAM,4EAA4E,CAAC;AACzL,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe,EAAE,CAAsB;IACxE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;IACpC,OAAO,iBAAiB,OAAO,0BAA0B,CAAC,CAAC,QAAQ,4BAA4B,CAAC,CAAC,QAAQ,kBAAkB,MAAM,EAAE,CAAC;AACtI,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,wBAAwB,CACrC,QAA4B,EAC5B,MAAgB,EAChB,UAAyC,sBAAsB;IAE/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAyF,EAAE,CAC3F,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,CACtD,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,yEAAyE;YACjF,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA8B,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,iBAAiB,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,UAAU,GAAG,eAAe,CAChC,SAAS,EACT;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,EACD,MAAM,CAAC,OAAO,CACf,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CACT,iBAAiB,SAAS,mBAAmB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,UAAU,IAAI,QAAQ,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD,KAAK,UAAU,cAAc,CAC3B,IAAmB,EACnB,OAAe,EACf,MAAgB;IAEhB,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAgB,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,gEAAgE;QAChE,0CAA0C;QAC1C,qDAAqD;QACrD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,GAAG,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,IAAI,GAA2C,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,kEAAkE;QAClE,8DAA8D;QAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,OAAO;YACP,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,uBAAuB,QAAQ,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/init.d.ts

@@ -1,59 +0,0 @@
-/**
- * `putitoutthere init` — scaffold a new repo.
- *
- * Writes:
- * - `putitoutthere.toml` (skeleton with `version = 1`, no packages)
- * - `putitoutthere/AGENTS.md` (trailer convention doc per plan.md §17.3)
- * - `.github/workflows/release.yml` + `.github/workflows/putitoutthere-check.yml`
- * - Appends `@putitoutthere/AGENTS.md` to `CLAUDE.md` (creates if missing)
- *
- * Idempotency (plan.md §17.4):
- * - Existing `putitoutthere.toml` → skip unless `--force`.
- * - Existing workflow → if byte-identical, mark already-present (no .bak);
- *   otherwise rename to `.bak` before writing (#148).
- * - Existing `CLAUDE.md` already containing the import line → skip the append.
- *
- * Issue #20 / #25. Plan: §9, §17.
- */
-import { type Cadence } from './templates.js';
-export interface InitOptions {
-    cwd: string;
-    /** Overwrite `putitoutthere.toml` even if it exists. */
-    force?: boolean;
-    /** Reserved for v0.1. Only `claude` supported today. */
-    agent?: 'claude' | 'cursor';
-    /** Release cadence; selects which release.yml template to emit. */
-    cadence?: Cadence;
-}
-export interface InitResult {
-    wrote: string[];
-    /**
-     * Files skipped because they already exist and `--force` would
-     * overwrite them. Just `putitoutthere.toml` today.
-     */
-    skipped: string[];
-    /**
-     * Files already in a correct state (AGENTS.md exists untouched,
-     * CLAUDE.md already imports the trailer doc, etc.). `--force`
-     * would not change these, so the CLI shouldn't suggest it.
-     */
-    alreadyPresent: string[];
-    backedUp: string[];
-    /**
-     * Short notes for the CLI to surface to the user — e.g. "detected
-     * existing v* tags; suggested tag_format = \"v{version}\" in the
-     * skeleton." Not errors; just signal about automatic decisions.
-     */
-    notes: string[];
-}
-export declare function init(opts: InitOptions): InitResult;
-/**
- * Shape returned when the repo already carries a `v{X.Y.Z}` tag
- * history. The caller embeds a `tag_format = "v{version}"` line in
- * the emitted TOML skeleton and surfaces a note to the user.
- */
-export interface TagFormatSuggestion {
-    tag_format: 'v{version}';
-    detectedTags: string[];
-}
-//# sourceMappingURL=init.d.ts.map

package/dist/init.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,EAAkD,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9F,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAiFlD;AAgCD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,YAAY,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/dist/init.js

@@ -1,181 +0,0 @@
-/**
- * `putitoutthere init` — scaffold a new repo.
- *
- * Writes:
- * - `putitoutthere.toml` (skeleton with `version = 1`, no packages)
- * - `putitoutthere/AGENTS.md` (trailer convention doc per plan.md §17.3)
- * - `.github/workflows/release.yml` + `.github/workflows/putitoutthere-check.yml`
- * - Appends `@putitoutthere/AGENTS.md` to `CLAUDE.md` (creates if missing)
- *
- * Idempotency (plan.md §17.4):
- * - Existing `putitoutthere.toml` → skip unless `--force`.
- * - Existing workflow → if byte-identical, mark already-present (no .bak);
- *   otherwise rename to `.bak` before writing (#148).
- * - Existing `CLAUDE.md` already containing the import line → skip the append.
- *
- * Issue #20 / #25. Plan: §9, §17.
- */
-import { execFileSync } from 'node:child_process';
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { AGENTS_MD, CHECK_YML, releaseYml, tomlSkeleton } from './templates.js';
-export function init(opts) {
-    const cwd = opts.cwd;
-    const force = Boolean(opts.force);
-    const agent = opts.agent ?? 'claude';
-    const cadence = opts.cadence ?? 'immediate';
-    const result = {
-        wrote: [],
-        skipped: [],
-        alreadyPresent: [],
-        backedUp: [],
-        notes: [],
-    };
-    // 1. putitoutthere.toml  -- `--force`-gated.
-    // Detect single-package shape + existing v* tag history so we suggest
-    // `tag_format = "v{version}"` instead of leaving the commented-out
-    // default — which would fork a parallel {name}-v{version} timeline on
-    // repos that already tag as v*. #204.
-    const suggestion = detectTagFormatSuggestion(cwd);
-    const tomlPath = join(cwd, 'putitoutthere.toml');
-    if (existsSync(tomlPath) && !force) {
-        result.skipped.push('putitoutthere.toml');
-    }
-    else {
-        const seeds = suggestion
-            ? {
-                tag_format: suggestion.tag_format,
-                tag_format_reason: `existing v*-style tag history (${suggestion.detectedTags
-                    .slice(0, 3)
-                    .join(', ')}${suggestion.detectedTags.length > 3 ? ', …' : ''})`,
-            }
-            : null;
-        writeAtomic(tomlPath, tomlSkeleton(seeds));
-        result.wrote.push('putitoutthere.toml');
-        if (suggestion !== null) {
-            result.notes.push(`tag_format: detected existing \`v*\` tags (${suggestion.detectedTags.slice(0, 3).join(', ')}${suggestion.detectedTags.length > 3 ? ', …' : ''}); suggested \`tag_format = "v{version}"\` in putitoutthere.toml to keep the existing timeline. Edit the file to override.`);
-        }
-    }
-    // 2. putitoutthere/AGENTS.md  -- not `--force`-gated; users edit this.
-    const agentsPath = join(cwd, 'putitoutthere', 'AGENTS.md');
-    if (existsSync(agentsPath)) {
-        result.alreadyPresent.push('putitoutthere/AGENTS.md');
-    }
-    else {
-        writeAtomic(agentsPath, AGENTS_MD);
-        result.wrote.push('putitoutthere/AGENTS.md');
-    }
-    // 3. CLAUDE.md / .cursorrules  -- append-only; skip if already imported.
-    if (agent === 'claude') {
-        const claudePath = join(cwd, 'CLAUDE.md');
-        const importLine = '@putitoutthere/AGENTS.md';
-        const existing = existsSync(claudePath) ? readFileSync(claudePath, 'utf8') : '';
-        if (existing.includes(importLine)) {
-            result.alreadyPresent.push('CLAUDE.md');
-        }
-        else {
-            const sep = existing.length > 0 && !existing.endsWith('\n') ? '\n' : '';
-            writeAtomic(claudePath, `${existing}${sep}${importLine}\n`);
-            result.wrote.push('CLAUDE.md');
-        }
-        /* v8 ignore start -- cursor path is stub-level until requested */
-    }
-    else {
-        const cursorPath = join(cwd, '.cursorrules');
-        const existing = existsSync(cursorPath) ? readFileSync(cursorPath, 'utf8') : '';
-        if (existing.includes('Release signaling for Put It Out There')) {
-            result.alreadyPresent.push('.cursorrules');
-        }
-        else {
-            writeAtomic(cursorPath, `${existing}${existing.length > 0 ? '\n' : ''}${AGENTS_MD}`);
-            result.wrote.push('.cursorrules');
-        }
-    }
-    /* v8 ignore stop */
-    // 4. Workflows
-    writeWorkflow(cwd, 'release.yml', releaseYml(cadence), result);
-    writeWorkflow(cwd, 'putitoutthere-check.yml', CHECK_YML, result);
-    return result;
-}
-/* ---------------------------- internals ---------------------------- */
-function writeWorkflow(cwd, name, contents, result) {
-    const target = join(cwd, '.github', 'workflows', name);
-    const rel = `.github/workflows/${name}`;
-    if (existsSync(target)) {
-        // #148: skip the `.bak` dance when the existing file is already
-        // byte-identical to what init would write. Otherwise re-running init
-        // pollutes the working tree with a fresh .bak each time.
-        const existing = readFileSync(target, 'utf8');
-        if (existing === contents) {
-            result.alreadyPresent.push(rel);
-            return;
-        }
-        const bak = `${target}.bak`;
-        renameSync(target, bak);
-        result.backedUp.push(rel);
-    }
-    writeAtomic(target, contents);
-    result.wrote.push(rel);
-}
-function writeAtomic(path, contents) {
-    // lgtm[js/insecure-temporary-file] -- writes into opts.cwd, which
-    // is the user's project root in production; only the test harness
-    // passes an os.tmpdir() subpath here, and that's controlled input.
-    mkdirSync(dirname(path), { recursive: true, mode: 0o755 });
-    writeFileSync(path, contents, { encoding: 'utf8', mode: 0o644 });
-}
-/**
- * Look for strict-semver `v*` tags on the current checkout. When
- * present (and no `<name>-v*` tags are also present), suggest
- * `tag_format = "v{version}"` in the skeleton so the adopter's next
- * release stays on their existing tag timeline instead of starting a
- * parallel `{name}-v{version}` one. #204.
- *
- * Returns null in any of these cases (default `{name}-v{version}` is
- * right):
- * - Not a git repo / `git` not on PATH.
- * - No `v{X.Y.Z}` tags.
- * - `<name>-v*` tags already exist (the repo is polyglot-shaped).
- */
-function detectTagFormatSuggestion(cwd) {
-    let vTags;
-    try {
-        const out = execFileSync('git', ['tag', '-l', 'v*.*.*'], {
-            cwd,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-        })
-            .trim()
-            .split('\n')
-            .filter((l) => /^v\d+\.\d+\.\d+$/.test(l));
-        vTags = out;
-    }
-    catch {
-        return null;
-    }
-    if (vTags.length === 0)
-        return null;
-    // If any `<name>-v*` tag exists, the repo is polyglot-shaped; don't
-    // hijack the default.
-    /* v8 ignore start -- defensive: the first git call succeeded above,
-     * so this one with a different glob is vanishingly unlikely to fail.
-     * Kept as belt-and-braces for unusual filesystems. */
-    try {
-        const out = execFileSync('git', ['tag', '-l', '*-v*.*.*'], {
-            cwd,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-        })
-            .trim()
-            .split('\n')
-            .filter((l) => /^.+-v\d+\.\d+\.\d+$/.test(l));
-        if (out.length > 0)
-            return null;
-    }
-    catch {
-        /* fall through */
-    }
-    /* v8 ignore stop */
-    return { tag_format: 'v{version}', detectedTags: vTags };
-}
-//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAgB,MAAM,gBAAgB,CAAC;AAkC9F,MAAM,UAAU,IAAI,CAAC,IAAiB;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;IACrC,MAAM,OAAO,GAAY,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IACrD,MAAM,MAAM,GAAe;QACzB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,6CAA6C;IAC7C,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,sCAAsC;IACtC,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC;gBACE,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,iBAAiB,EAAE,kCAAkC,UAAU,CAAC,YAAY;qBACzE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qBACX,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;aACnE;YACH,CAAC,CAAC,IAAI,CAAC;QACT,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,8CAA8C,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAC1F,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAC/C,4HAA4H,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IAED,yEAAyE;IACzE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,WAAW,CAAC,UAAU,EAAE,GAAG,QAAQ,GAAG,GAAG,GAAG,UAAU,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QACD,kEAAkE;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,QAAQ,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,UAAU,EAAE,GAAG,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,oBAAoB;IAEpB,eAAe;IACf,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,aAAa,CAAC,GAAG,EAAE,yBAAyB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AAEzE,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,QAAgB,EAAE,MAAkB;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,qBAAqB,IAAI,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,gEAAgE;QAChE,qEAAqE;QACrE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,MAAM,MAAM,CAAC;QAC5B,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,kEAAkE;IAClE,kEAAkE;IAClE,mEAAmE;IACnE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,SAAS,yBAAyB,CAAC,GAAW;IAC5C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;YACvD,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC;aACC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,oEAAoE;IACpE,sBAAsB;IACtB;;0DAEsD;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE;YACzD,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC;aACC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,oBAAoB;IAEpB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC"}

package/dist/keyring.d.ts

@@ -1,35 +0,0 @@
-/**
- * Keyring — persistent storage for the user access token obtained
- * through `auth login`.
- *
- * Ships with a file-backed implementation (chmod 0600 in an XDG-
- * compliant config dir). The `Keyring` interface is the seam for
- * swapping in an OS keychain binding (e.g. `keytar`) later; see #105.
- *
- * Token values are never logged. Callers pass the whole `StoredAuth`
- * in and out; this module does not expose a "read just the access
- * token" affordance that could encourage stringification.
- */
-export interface StoredAuth {
-    /** GitHub login of the account that approved the Device Flow. */
-    account: string;
-    access_token: string;
-    refresh_token: string;
-    /** Epoch seconds. */
-    access_token_expires_at: number;
-    /** Epoch seconds. */
-    refresh_token_expires_at: number;
-}
-export interface Keyring {
-    get(): Promise<StoredAuth | null>;
-    set(auth: StoredAuth): Promise<void>;
-    delete(): Promise<void>;
-}
-export interface FileKeyringOptions {
-    /** Override the resolved config dir. Tests inject a tmp path. */
-    dir?: string;
-}
-export declare function fileKeyring(opts?: FileKeyringOptions): Keyring;
-/** Returned for production callers. */
-export declare function defaultKeyring(): Keyring;
-//# sourceMappingURL=keyring.d.ts.map

package/dist/keyring.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB;IACrB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB;IACrB,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,OAAO;IACtB,GAAG,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CA4BlE;AAED,uCAAuC;AACvC,wBAAgB,cAAc,IAAI,OAAO,CAExC"}