putitoutthere 0.3.18 → 0.3.20

package/dist/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiE1C"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAoE1C"}

package/dist/action.js

@@ -9,6 +9,7 @@
  */
 import { pathToFileURL } from 'node:url';
 import { run } from './cli.js';
+import { flushStdio } from './utils/flush-stdio.js';
 export async function main() {
     const command = process.env.INPUT_COMMAND ?? '';
     const workingDirectory = process.env.INPUT_WORKING_DIRECTORY ?? '';
@@ -20,6 +21,7 @@ export async function main() {
     const failOnError = (process.env.INPUT_FAIL_ON_ERROR ?? 'true').toLowerCase() !== 'false';
     if (!command) {
         process.stderr.write('putitoutthere action: missing required input `command`\n');
+        await flushStdio();
         process.exit(1);
     }
     // #276: write-version uses a different argv shape — `--path` (the
@@ -84,8 +86,10 @@ export async function main() {
     const code = await run(argv);
     if (code !== 0 && !failOnError) {
         process.stderr.write(`putitoutthere action: ignoring non-zero exit (fail_on_error=false): ${code}\n`);
+        await flushStdio();
         process.exit(0);
     }
+    await flushStdio();
     process.exit(code);
 }
 // Entry-point guard. Compare via `pathToFileURL` so the guard fires on

package/dist/action.js.map

@@ -1 +1 @@
-{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAExE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,CAC3D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,8DAA8D;IAC9D,+DAA+D;IAC/D,eAAe;IACf,qEAAqE;IACrE,2DAA2D;IAC3D,iEAAiE;IACjE,8BAA8B;IAC9B,wEAAwE;IACxE,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,sEAAsE;IACtE,wCAAwC;IACxC,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,IAAI,GAAG,OAAO,KAAK,mBAAmB;QAC1C,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC;QACnD,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACrE,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAAA,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;IAChE,CAAC;SAAM,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAC3C,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAAA,CAAC;QAChD,IAAI,GAAG,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAA,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAAA,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAAA,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,IAAI,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,kEAAkE;AAClE,gEAAgE;AAChE,uDAAuD;AACvD,mFAAmF;AACnF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AACD,oBAAoB"}
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAExE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,CAC3D,CAAC;QACF,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,8DAA8D;IAC9D,+DAA+D;IAC/D,eAAe;IACf,qEAAqE;IACrE,2DAA2D;IAC3D,iEAAiE;IACjE,8BAA8B;IAC9B,wEAAwE;IACxE,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,sEAAsE;IACtE,wCAAwC;IACxC,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,IAAI,GAAG,OAAO,KAAK,mBAAmB;QAC1C,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC;QACnD,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACrE,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAAA,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;IAChE,CAAC;SAAM,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAC3C,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAAA,CAAC;QAChD,IAAI,GAAG,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAA,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAAA,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAAA,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,IAAI,IAAI,CAChF,CAAC;QACF,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,EAAE,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,kEAAkE;AAClE,gEAAgE;AAChE,uDAAuD;AACvD,mFAAmF;AACnF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AACD,oBAAoB"}

package/dist/check/check-cargo-shape-findings.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkCargoShapeFindings(packages: readonly Package[], cwd: string, findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-cargo-shape-findings.d.ts.map

package/dist/check/check-cargo-shape-findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-cargo-shape-findings.d.ts","sourceRoot":"","sources":["../../src/check/check-cargo-shape-findings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/check/check-cargo-shape-findings.js

@@ -0,0 +1,10 @@
+import { checkCargoShape } from '../preflight.js';
+export async function checkCargoShapeFindings(packages, cwd, findings) {
+    for (const f of await checkCargoShape(packages, { cwd })) {
+        findings.push({
+            package: f.package,
+            message: `[${f.code}] ${f.cargoTomlPath}: ${f.detail}`,
+        });
+    }
+}
+//# sourceMappingURL=check-cargo-shape-findings.js.map

package/dist/check/check-cargo-shape-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-cargo-shape-findings.js","sourceRoot":"","sources":["../../src/check/check-cargo-shape-findings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-crates-package-metadata.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkCratesPackageMetadata(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-crates-package-metadata.d.ts.map

package/dist/check/check-crates-package-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-crates-package-metadata.d.ts","sourceRoot":"","sources":["../../src/check/check-crates-package-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/check/check-crates-package-metadata.js

@@ -0,0 +1,11 @@
+import { ErrorCodes } from '../error-codes.js';
+import { checkCratesMetadata } from '../preflight.js';
+export async function checkCratesPackageMetadata(packages, findings) {
+    for (const f of await checkCratesMetadata(packages)) {
+        findings.push({
+            package: f.package,
+            message: `[${ErrorCodes.CRATES_MISSING_METADATA}] ${f.cargoTomlPath} missing required Cargo.toml [package] field(s): ${f.missing.join(', ')}. crates.io rejects the publish after cargo's verification build.`,
+        });
+    }
+}
+//# sourceMappingURL=check-crates-package-metadata.js.map

package/dist/check/check-crates-package-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-crates-package-metadata.js","sourceRoot":"","sources":["../../src/check/check-crates-package-metadata.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,uBAAuB,KAAK,CAAC,CAAC,aAAa,oDAAoD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE;SAC/M,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-depends-on.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkDependsOn(packages: readonly Package[], findings: CheckFinding[]): void;
+//# sourceMappingURL=check-depends-on.d.ts.map

package/dist/check/check-depends-on.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-depends-on.d.ts","sourceRoot":"","sources":["../../src/check/check-depends-on.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAQ3F"}

package/dist/check/check-depends-on.js

@@ -0,0 +1,13 @@
+import { assertNoCycles } from '../cascade.js';
+import { toError } from '../to-error.js';
+export function checkDependsOn(packages, findings) {
+    try {
+        assertNoCycles(packages);
+    }
+    catch (err) {
+        findings.push({
+            message: toError(err).message,
+        });
+    }
+}
+//# sourceMappingURL=check-depends-on.js.map

package/dist/check/check-depends-on.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-depends-on.js","sourceRoot":"","sources":["../../src/check/check-depends-on.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGzC,MAAM,UAAU,cAAc,CAAC,QAA4B,EAAE,QAAwB;IACnF,IAAI,CAAC;QACH,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-globs-match-tracked-files.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkGlobsMatchTrackedFiles(packages: readonly Package[], cwd: string, findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-globs-match-tracked-files.d.ts.map

package/dist/check/check-globs-match-tracked-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-globs-match-tracked-files.d.ts","sourceRoot":"","sources":["../../src/check/check-globs-match-tracked-files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/check/check-globs-match-tracked-files.js

@@ -0,0 +1,18 @@
+import { matchesAny } from '../glob.js';
+import { listTrackedFiles } from './list-tracked-files.js';
+export async function checkGlobsMatchTrackedFiles(packages, cwd, findings) {
+    const tracked = await listTrackedFiles(cwd);
+    if (tracked === null) {
+        return;
+    }
+    for (const p of packages) {
+        const matched = tracked.some((f) => matchesAny(p.globs, f));
+        if (!matched) {
+            findings.push({
+                package: p.name,
+                message: `globs ${JSON.stringify(p.globs)} matched no tracked files. Empty globs mean the package will never cascade on a real commit.`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=check-globs-match-tracked-files.js.map

package/dist/check/check-globs-match-tracked-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-globs-match-tracked-files.js","sourceRoot":"","sources":["../../src/check/check-globs-match-tracked-files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,8FAA8F;aACxI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/check/check-npm-repository.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkNpmRepository(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-npm-repository.d.ts.map

package/dist/check/check-npm-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-npm-repository.d.ts","sourceRoot":"","sources":["../../src/check/check-npm-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAW9G"}

package/dist/check/check-npm-repository.js

@@ -0,0 +1,14 @@
+import { ErrorCodes } from '../error-codes.js';
+import { checkProvenanceMetadata } from '../preflight.js';
+export async function checkNpmRepository(packages, findings) {
+    for (const f of await checkProvenanceMetadata(packages)) {
+        const reason = f.reason === 'missing'
+            ? `${f.packageJsonPath} not found`
+            : `${f.packageJsonPath} has missing or empty \`repository\``;
+        findings.push({
+            package: f.package,
+            message: `[${ErrorCodes.NPM_MISSING_REPOSITORY}] ${reason}. \`npm publish --provenance\` hard-requires a non-empty repository.url.`,
+        });
+    }
+}
+//# sourceMappingURL=check-npm-repository.js.map

package/dist/check/check-npm-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-npm-repository.js","sourceRoot":"","sources":["../../src/check/check-npm-repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAA4B,EAAE,QAAwB;IAC7F,KAAK,MAAM,CAAC,IAAI,MAAM,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,YAAY;YAClC,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,sCAAsC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,sBAAsB,KAAK,MAAM,0EAA0E;SACpI,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-npm-target-triples.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkNpmTargetTriples(packages: readonly Package[], findings: CheckFinding[]): void;
+//# sourceMappingURL=check-npm-target-triples.d.ts.map

package/dist/check/check-npm-target-triples.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-npm-target-triples.d.ts","sourceRoot":"","sources":["../../src/check/check-npm-target-triples.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAI5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,IAAI,CAiBN"}

package/dist/check/check-npm-target-triples.js

@@ -0,0 +1,27 @@
+import { assertTripleSupported } from '../handlers/npm-platform.js';
+import { toError } from '../to-error.js';
+import { normalizeTarget } from '../types.js';
+export function checkNpmTargetTriples(packages, findings) {
+    for (const p of packages) {
+        if (p.kind !== 'npm') {
+            continue;
+        }
+        const targets = p.targets;
+        if (!targets) {
+            continue;
+        }
+        for (const t of targets) {
+            const { triple } = normalizeTarget(t);
+            try {
+                assertTripleSupported(triple, p.name);
+            }
+            catch (err) {
+                findings.push({
+                    package: p.name,
+                    message: toError(err).message,
+                });
+            }
+        }
+    }
+}
+//# sourceMappingURL=check-npm-target-triples.js.map

package/dist/check/check-npm-target-triples.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-npm-target-triples.js","sourceRoot":"","sources":["../../src/check/check-npm-target-triples.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAoB,MAAM,aAAa,CAAC;AAGhE,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACjC,MAAM,OAAO,GAAI,CAAiC,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;oBACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/check/check-package-json-shape-findings.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkPackageJsonShapeFindings(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-package-json-shape-findings.d.ts.map

package/dist/check/check-package-json-shape-findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-package-json-shape-findings.d.ts","sourceRoot":"","sources":["../../src/check/check-package-json-shape-findings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/check/check-package-json-shape-findings.js

@@ -0,0 +1,10 @@
+import { checkPackageJsonShape } from '../preflight.js';
+export async function checkPackageJsonShapeFindings(packages, findings) {
+    for (const f of await checkPackageJsonShape(packages)) {
+        findings.push({
+            package: f.package,
+            message: `[${f.code}] ${f.packageJsonPath}: ${f.detail}`,
+        });
+    }
+}
+//# sourceMappingURL=check-package-json-shape-findings.js.map

package/dist/check/check-package-json-shape-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-package-json-shape-findings.js","sourceRoot":"","sources":["../../src/check/check-package-json-shape-findings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,MAAM,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-paths.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkPaths(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-paths.d.ts.map

package/dist/check/check-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-paths.d.ts","sourceRoot":"","sources":["../../src/check/check-paths.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,UAAU,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAStG"}

package/dist/check/check-paths.js

@@ -0,0 +1,13 @@
+import { stat } from 'node:fs/promises';
+import { pathExists } from '../utils/path-exists.js';
+export async function checkPaths(packages, findings) {
+    for (const p of packages) {
+        if (!(await pathExists(p.path)) || !(await stat(p.path)).isDirectory()) {
+            findings.push({
+                package: p.name,
+                message: `path "${p.path}" does not exist or is not a directory in the worktree`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=check-paths.js.map

package/dist/check/check-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-paths.js","sourceRoot":"","sources":["../../src/check/check-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAA4B,EAAE,QAAwB;IACrF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,wDAAwD;aACjF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/check/check-pypi-version.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkPypiVersion(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-pypi-version.d.ts.map

package/dist/check/check-pypi-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pypi-version.d.ts","sourceRoot":"","sources":["../../src/check/check-pypi-version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/check/check-pypi-version.js

@@ -0,0 +1,11 @@
+import { ErrorCodes } from '../error-codes.js';
+import { checkPypiVersionSource } from '../preflight.js';
+export async function checkPypiVersion(packages, findings) {
+    for (const f of await checkPypiVersionSource(packages)) {
+        findings.push({
+            package: f.package,
+            message: `[${ErrorCodes.PYPI_STATIC_VERSION}] ${f.pyprojectPath} declares a static \`[project].version\` literal. Use \`[project].dynamic = ["version"]\` with hatch-vcs (recommended), setuptools-scm, or the maturin Cargo.toml-driven path — putitoutthere does not edit pyproject.toml at release time, so a literal silently ships the previous release.`,
+        });
+    }
+}
+//# sourceMappingURL=check-pypi-version.js.map

package/dist/check/check-pypi-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pypi-version.js","sourceRoot":"","sources":["../../src/check/check-pypi-version.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,mBAAmB,KAAK,CAAC,CAAC,aAAa,+RAA+R;SAC/V,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-pyproject-and-bundle-cli.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkPyprojectAndBundleCli(packages: readonly Package[], cwd: string, findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-pyproject-and-bundle-cli.d.ts.map

package/dist/check/check-pyproject-and-bundle-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pyproject-and-bundle-cli.d.ts","sourceRoot":"","sources":["../../src/check/check-pyproject-and-bundle-cli.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/check/check-pyproject-and-bundle-cli.js

@@ -0,0 +1,52 @@
+import { stat } from 'node:fs/promises';
+import { isAbsolute, join, resolve } from 'node:path';
+import { pathExists } from '../utils/path-exists.js';
+import { readDeclaredBins } from './read-declared-bins.js';
+export async function checkPyprojectAndBundleCli(packages, cwd, findings) {
+    for (const p of packages) {
+        if (p.kind !== 'pypi') {
+            continue;
+        }
+        const pyprojectPath = join(p.path, 'pyproject.toml');
+        if (!(await pathExists(pyprojectPath))) {
+            findings.push({
+                package: p.name,
+                message: `pyproject.toml not found at ${pyprojectPath}`,
+            });
+            continue;
+        }
+        if (p.build !== 'maturin' || p.bundle_cli === undefined) {
+            continue;
+        }
+        const bundleCli = p.bundle_cli;
+        // `bundle_cli.crate_path` is documented as relative to the repo
+        // root (see config.ts: default = "."). Resolve against `cwd`,
+        // not the package path.
+        const cratePathAbs = isAbsolute(bundleCli.crate_path)
+            ? bundleCli.crate_path
+            : resolve(cwd, bundleCli.crate_path);
+        const cargoTomlPath = join(cratePathAbs, 'Cargo.toml');
+        if (!(await pathExists(cratePathAbs)) || !(await stat(cratePathAbs)).isDirectory()) {
+            findings.push({
+                package: p.name,
+                message: `bundle_cli.crate_path "${bundleCli.crate_path}" does not exist or is not a directory`,
+            });
+            continue;
+        }
+        if (!(await pathExists(cargoTomlPath))) {
+            findings.push({
+                package: p.name,
+                message: `bundle_cli.crate_path "${bundleCli.crate_path}" has no Cargo.toml`,
+            });
+            continue;
+        }
+        const declaredBins = await readDeclaredBins(cargoTomlPath);
+        if (!declaredBins.includes(bundleCli.bin)) {
+            findings.push({
+                package: p.name,
+                message: `bundle_cli.bin "${bundleCli.bin}" is not declared as a [[bin]] in ${cargoTomlPath}. Declared bins: ${declaredBins.length === 0 ? '(none)' : declaredBins.join(', ')}.`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=check-pyproject-and-bundle-cli.js.map

package/dist/check/check-pyproject-and-bundle-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pyproject-and-bundle-cli.js","sourceRoot":"","sources":["../../src/check/check-pyproject-and-bundle-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAClC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,+BAA+B,aAAa,EAAE;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpE,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;QAC/B,gEAAgE;QAChE,8DAA8D;QAC9D,wBAAwB;QACxB,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC,UAAU;YACtB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnF,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,0BAA0B,SAAS,CAAC,UAAU,wCAAwC;aAChG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,0BAA0B,SAAS,CAAC,UAAU,qBAAqB;aAC7E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,mBAAmB,SAAS,CAAC,GAAG,qCAAqC,aAAa,oBAAoB,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACjL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/check/check-pyproject-shape-findings.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkPyprojectShapeFindings(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-pyproject-shape-findings.d.ts.map

package/dist/check/check-pyproject-shape-findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pyproject-shape-findings.d.ts","sourceRoot":"","sources":["../../src/check/check-pyproject-shape-findings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/check/check-pyproject-shape-findings.js

@@ -0,0 +1,10 @@
+import { checkPyprojectShape } from '../preflight.js';
+export async function checkPyprojectShapeFindings(packages, findings) {
+    for (const f of await checkPyprojectShape(packages)) {
+        findings.push({
+            package: f.package,
+            message: `[${f.code}] ${f.pyprojectPath}: ${f.detail}`,
+        });
+    }
+}
+//# sourceMappingURL=check-pyproject-shape-findings.js.map

package/dist/check/check-pyproject-shape-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pyproject-shape-findings.js","sourceRoot":"","sources":["../../src/check/check-pyproject-shape-findings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-repo-url-match-findings.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkRepoUrlMatchFindings(packages: readonly Package[], findings: CheckFinding[]): Promise<void>;
+//# sourceMappingURL=check-repo-url-match-findings.d.ts.map

package/dist/check/check-repo-url-match-findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-repo-url-match-findings.d.ts","sourceRoot":"","sources":["../../src/check/check-repo-url-match-findings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/check/check-repo-url-match-findings.js

@@ -0,0 +1,17 @@
+import { ErrorCodes } from '../error-codes.js';
+import { checkRepoUrlMatch } from '../preflight.js';
+export async function checkRepoUrlMatchFindings(packages, findings) {
+    // Sourced from GHA's process env at PR time when this runs inside the
+    // reusable workflow. Locally invoked `putitoutthere check` outside any
+    // GHA context will skip the check (the preflight returns no findings
+    // when GITHUB_REPOSITORY is unset), which is the right behaviour:
+    // there is no workflow source to disagree with.
+    const githubRepository = process.env.GITHUB_REPOSITORY;
+    for (const f of await checkRepoUrlMatch(packages, { githubRepository })) {
+        findings.push({
+            package: f.package,
+            message: `[${ErrorCodes.REPO_URL_MISMATCH}] ${f.manifestPath}: declared repository "${f.declaredOwnerRepo}" does not match GITHUB_REPOSITORY "${f.expectedOwnerRepo}". npm rejects \`--provenance\` publishes whose package.json#repository.url disagrees with the OIDC source claim (422); crates.io / PyPI trusted-publisher paths carry the same risk.`,
+        });
+    }
+}
+//# sourceMappingURL=check-repo-url-match-findings.js.map

package/dist/check/check-repo-url-match-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-repo-url-match-findings.js","sourceRoot":"","sources":["../../src/check/check-repo-url-match-findings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAA4B,EAC5B,QAAwB;IAExB,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,iBAAiB,KAAK,CAAC,CAAC,YAAY,0BAA0B,CAAC,CAAC,iBAAiB,uCAAuC,CAAC,CAAC,iBAAiB,uLAAuL;SAC3V,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/check/check-tag-template-collisions.d.ts

@@ -0,0 +1,4 @@
+import type { Package } from '../config.js';
+import type { CheckFinding } from '../check.js';
+export declare function checkTagTemplateCollisions(packages: readonly Package[], findings: CheckFinding[]): void;
+//# sourceMappingURL=check-tag-template-collisions.d.ts.map

package/dist/check/check-tag-template-collisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-tag-template-collisions.d.ts","sourceRoot":"","sources":["../../src/check/check-tag-template-collisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,QAAQ,EAAE,YAAY,EAAE,GACvB,IAAI,CAkBN"}

package/dist/check/check-tag-template-collisions.js

@@ -0,0 +1,22 @@
+import { formatTag } from '../tag-template.js';
+export function checkTagTemplateCollisions(packages, findings) {
+    // Templates collide when they resolve to the same tag at the same
+    // version — typically when `{name}` is omitted and every package
+    // thereafter races for one tag slot. A sentinel version is enough:
+    // differing templates differ on every version, identical templates
+    // collide on every version.
+    const seen = new Map();
+    for (const p of packages) {
+        const sentinel = formatTag(p.tag_format, { name: p.name, version: '0.0.0' });
+        const prior = seen.get(sentinel);
+        if (prior !== undefined) {
+            findings.push({
+                message: `tag_format collision: "${p.name}" and "${prior}" both resolve to tag "${sentinel}" at the same version. Include {name} in tag_format to disambiguate.`,
+            });
+        }
+        else {
+            seen.set(sentinel, p.name);
+        }
+    }
+}
+//# sourceMappingURL=check-tag-template-collisions.js.map

package/dist/check/check-tag-template-collisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-tag-template-collisions.js","sourceRoot":"","sources":["../../src/check/check-tag-template-collisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,UAAU,0BAA0B,CACxC,QAA4B,EAC5B,QAAwB;IAExB,kEAAkE;IAClE,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,4BAA4B;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,0BAA0B,CAAC,CAAC,IAAI,UAAU,KAAK,0BAA0B,QAAQ,sEAAsE;aACjK,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/check/collect-bins-from-manifest.d.ts

@@ -0,0 +1,2 @@
+export declare function collectBinsFromManifest(parsed: Record<string, unknown>): string[];
+//# sourceMappingURL=collect-bins-from-manifest.d.ts.map

package/dist/check/collect-bins-from-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-bins-from-manifest.d.ts","sourceRoot":"","sources":["../../src/check/collect-bins-from-manifest.ts"],"names":[],"mappings":"AAAA,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAqBjF"}

package/dist/check/collect-bins-from-manifest.js

@@ -0,0 +1,27 @@
+export function collectBinsFromManifest(parsed) {
+    const result = [];
+    const bins = parsed.bin;
+    if (Array.isArray(bins)) {
+        for (const entry of bins) {
+            if (typeof entry === 'object' && entry !== null) {
+                const name = entry.name;
+                if (typeof name === 'string') {
+                    result.push(name);
+                }
+            }
+        }
+    }
+    // Cargo's implicit-binary rule: a crate without any explicit [[bin]]
+    // table ships a binary named after `[package].name` when
+    // `src/main.rs` exists. Include that name as a candidate so the
+    // common single-binary shape (one crate, one bin, no [[bin]] block)
+    // doesn't spuriously fail this check.
+    if (result.length === 0) {
+        const pkg = parsed.package;
+        if (pkg && typeof pkg.name === 'string') {
+            result.push(pkg.name);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=collect-bins-from-manifest.js.map

package/dist/check/collect-bins-from-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-bins-from-manifest.js","sourceRoot":"","sources":["../../src/check/collect-bins-from-manifest.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;IACxB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;gBAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAAA,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,yDAAyD;IACzD,gEAAgE;IAChE,oEAAoE;IACpE,sCAAsC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAyC,CAAC;QAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/check/list-tracked-files.d.ts

@@ -0,0 +1,2 @@
+export declare function listTrackedFiles(cwd: string): Promise<string[] | null>;
+//# sourceMappingURL=list-tracked-files.d.ts.map

package/dist/check/list-tracked-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-tracked-files.d.ts","sourceRoot":"","sources":["../../src/check/list-tracked-files.ts"],"names":[],"mappings":"AAEA,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAO5E"}

package/dist/check/list-tracked-files.js

@@ -0,0 +1,11 @@
+import { execCapture } from '../utils/exec-capture.js';
+export async function listTrackedFiles(cwd) {
+    try {
+        const { stdout } = await execCapture('git', ['ls-files'], { cwd });
+        return stdout.split('\n').filter((l) => l.length > 0);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=list-tracked-files.js.map

package/dist/check/list-tracked-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-tracked-files.js","sourceRoot":"","sources":["../../src/check/list-tracked-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/check/parse-cargo-toml.d.ts

@@ -0,0 +1,2 @@
+export declare function parseCargoToml(path: string): Promise<Record<string, unknown> | null>;
+//# sourceMappingURL=parse-cargo-toml.d.ts.map

package/dist/check/parse-cargo-toml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-cargo-toml.d.ts","sourceRoot":"","sources":["../../src/check/parse-cargo-toml.ts"],"names":[],"mappings":"AAIA,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAM1F"}

package/dist/check/parse-cargo-toml.js

@@ -0,0 +1,11 @@
+import { readFile } from 'node:fs/promises';
+import { parse as parseToml } from 'smol-toml';
+export async function parseCargoToml(path) {
+    try {
+        return parseToml(await readFile(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=parse-cargo-toml.js.map

package/dist/check/parse-cargo-toml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-cargo-toml.js","sourceRoot":"","sources":["../../src/check/parse-cargo-toml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/check/read-declared-bins.d.ts

@@ -0,0 +1,2 @@
+export declare function readDeclaredBins(cargoTomlPath: string): Promise<string[]>;
+//# sourceMappingURL=read-declared-bins.d.ts.map

package/dist/check/read-declared-bins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-declared-bins.d.ts","sourceRoot":"","sources":["../../src/check/read-declared-bins.ts"],"names":[],"mappings":"AAIA,wBAAsB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAsB/E"}