putitoutthere 0.3.25 → 0.3.27

package/dist/handlers/classify-npm-view-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classify-npm-view-failure.d.ts","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEpE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAsCrE"}
+{"version":3,"file":"classify-npm-view-failure.d.ts","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEpE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAiCrE"}

package/dist/handlers/classify-npm-view-failure.js

@@ -1,48 +1,17 @@
 /**
- * What a failed `npm view` probe actually means (#650).
- *
- * `isPublished` asks npm whether a version exists by shelling out to
- * `npm view <name>@<version> version` and reading the exit status. Every
- * non-zero exit used to mean the same thing — "not published" — which is
- * true for the answer the probe was written for (`E404`) and false for
- * every way the question can fail to be asked at all. A hermetic
- * (`--network none`) `plan` run reported `verdict: publish` for packages it
- * had never reached the registry to ask about.
- *
- * Three outcomes, keyed off npm's own machine-readable `npm error code`
- * line:
- *
- *  - `absent` — the registry answered and the version is not there
- *    (`E404`), plus anything unrecognised. The historical behaviour, and
- *    the conservative default: an unfamiliar code keeps the pre-#650
- *    reading rather than inventing a new failure mode for it.
- *  - `unreachable` — the registry hostname does not resolve
- *    (`ENOTFOUND` / `EAI_AGAIN`). Deterministic within a run: no retry can
- *    turn a name that does not resolve into one that does, and no answer
- *    is coming, so the caller reports "unknown", not "not published".
- *  - `transient` — the registry was reached and faltered (timeouts, reset
- *    connections, 429, 5xx). These are the cases the retry policy was
- *    written for, so the caller raises a `TransientError` and lets
- *    `withRetry` do its job.
- *
- * Matching npm's `code` line rather than its prose keeps this stable
- * across npm's message rewrites; both the modern `npm error` prefix (npm
- * 11) and the legacy `npm ERR!` one (npm ≤ 10, still on plenty of
- * consumer runners) are accepted.
+ * What a failed `npm view` probe actually means (#650). Keyed off npm's own
+ * machine-readable `code` line rather than its prose: `absent` for `E404` plus
+ * anything unrecognised (the conservative default), `unreachable` for
+ * `ENOTFOUND` / `EAI_AGAIN`, `transient` for timeouts / resets / 429 / 5xx.
  */
 export function classifyNpmViewFailure(stderr) {
     // Function-scoped, not module-scoped: mutants in module-level initializers
-    // run once at import, where the mutation gate's per-test switching cannot
-    // reach them, so they were reported surviving despite the colocated tests
-    // killing every one when applied by hand.
+    // run once at import, out of reach of the gate's per-test switching.
     /**
      * npm's machine-readable failure code, in either prefix spelling:
      * `npm error code ENOTFOUND` (npm 11) / `npm ERR! code ENOTFOUND` (npm <= 10).
-     *
-     * The prefix sits in a lookbehind rather than a capture group so the match
-     * *is* the code. A capture group would be typed `string | undefined` under
-     * `noUncheckedIndexedAccess`, forcing a `?? ''` fallback for a group that
-     * cannot fail to participate — an unreachable default no test can pin.
+     * The prefix sits in a lookbehind, not a capture group, so the match *is* the
+     * code — a group would be `string | undefined` under `noUncheckedIndexedAccess`.
      */
     const codeLine = /(?<=^npm (?:error|ERR!) code )\S+$/m;
     /** DNS resolution failed — there is no registry to talk to. */

package/dist/handlers/classify-npm-view-failure.js.map

@@ -1 +1 @@
-{"version":3,"file":"classify-npm-view-failure.js","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0CAA0C;IAC1C;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,qCAAqC,CAAC;IACvD,+DAA+D;IAC/D,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAClF,yDAAyD;IACzD,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;QAClD,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,MAAM;KACP,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,eAAe,GAAG,gBAAgB,CAAC;IAEzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,aAAa,CAAC;IAAA,CAAC;IACvD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACnD,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"classify-npm-view-failure.js","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,2EAA2E;IAC3E,qEAAqE;IACrE;;;;;OAKG;IACH,MAAM,QAAQ,GAAG,qCAAqC,CAAC;IACvD,+DAA+D;IAC/D,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAClF,yDAAyD;IACzD,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;QAClD,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,MAAM;KACP,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,eAAe,GAAG,gBAAgB,CAAC;IAEzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,aAAa,CAAC;IAAA,CAAC;IACvD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACnD,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/handlers/crates.d.ts

@@ -1,39 +1,8 @@
 /**
- * crates.io handler.
- *
- * Issue #16. Plan: §7.4, §13.1, §14.5, §16.1.
- *
- * - isPublished: GET /api/v1/crates/{name}/{version}; 200 → true, 404 →
- *   false, 5xx → TransientError (retry-wrapped at call site).
- * - writeVersion: delegates to `writeResolvedCargoVersion`, which
- *   rewrites a literal `[package].version` in place or, for a crate
- *   that inherits (`version.workspace = true`), the workspace root's
- *   `[workspace.package].version` instead (#428, #639). Regex-based to
- *   preserve comments and whitespace; the alternative (TOML
- *   round-trip) loses formatting.
- * - publish: `cargo publish --allow-dirty --verbose` with stderr
- *   captured for the failure dump. Short-circuits on
- *   already-published (idempotent).
- *
- * A failure message carries cargo's stderr through `elideMiddle`
- * (#651). `--verbose` plus `CARGO_TERM_VERBOSE=true` makes a cold
- * verify build run to hundreds of KB, and the whole message lands on
- * one log line, which GitHub cuts at 64KB from the *front* — so the
- * unelided version threw away cargo's error and kept the successful
- * build chatter. Only the rendered message is bounded: `stderr` itself
- * stays whole for the predicates below (`isRateLimited`,
- * `matchFirstPublishTpRejection`) and for the job-summary dump, which
- * reads it off the ExecError and writes to a file with no line cut.
- *
- * --allow-dirty is required for our writeVersion-then-publish model
- * (#135), so `scanDirtyOutsideManifest` restores a narrowed version of
- * cargo's own dirty-check before we invoke it. A null scan (e.g. no git
- * repo) means we can't verify, and we fall back to cargo's --allow-dirty.
- *
- * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
- * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't
- * drive the exchange -- it just reads the env var the workflow wired
- * up (same for classic token fallback).
+ * crates.io handler (#16; plan §7.4, §13.1, §14.5, §16.1). `--allow-dirty`
+ * is required by the writeVersion-then-publish model (#135), so
+ * `scanDirtyOutsideManifest` reinstates a narrowed dirty-check. stderr is
+ * elided mid-message (#651): GitHub cuts a log line at 64KB from the *front*.
  */
 import type { Handler } from '../types.js';
 export declare function relativeOrSelf(base: string, target: string): string;

package/dist/handlers/crates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAKH,OAAO,KAAK,EAAO,OAAO,EAA+B,MAAM,aAAa,CAAC;AA0Q7E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOnE;AA6CD,eAAO,MAAM,MAAM,EAAE,OAOpB,CAAC"}
+{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAO,OAAO,EAA+B,MAAM,aAAa,CAAC;AAkQ7E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOnE;AA6CD,eAAO,MAAM,MAAM,EAAE,OAOpB,CAAC"}

package/dist/handlers/crates.js

@@ -1,39 +1,8 @@
 /**
- * crates.io handler.
- *
- * Issue #16. Plan: §7.4, §13.1, §14.5, §16.1.
- *
- * - isPublished: GET /api/v1/crates/{name}/{version}; 200 → true, 404 →
- *   false, 5xx → TransientError (retry-wrapped at call site).
- * - writeVersion: delegates to `writeResolvedCargoVersion`, which
- *   rewrites a literal `[package].version` in place or, for a crate
- *   that inherits (`version.workspace = true`), the workspace root's
- *   `[workspace.package].version` instead (#428, #639). Regex-based to
- *   preserve comments and whitespace; the alternative (TOML
- *   round-trip) loses formatting.
- * - publish: `cargo publish --allow-dirty --verbose` with stderr
- *   captured for the failure dump. Short-circuits on
- *   already-published (idempotent).
- *
- * A failure message carries cargo's stderr through `elideMiddle`
- * (#651). `--verbose` plus `CARGO_TERM_VERBOSE=true` makes a cold
- * verify build run to hundreds of KB, and the whole message lands on
- * one log line, which GitHub cuts at 64KB from the *front* — so the
- * unelided version threw away cargo's error and kept the successful
- * build chatter. Only the rendered message is bounded: `stderr` itself
- * stays whole for the predicates below (`isRateLimited`,
- * `matchFirstPublishTpRejection`) and for the job-summary dump, which
- * reads it off the ExecError and writes to a file with no line cut.
- *
- * --allow-dirty is required for our writeVersion-then-publish model
- * (#135), so `scanDirtyOutsideManifest` restores a narrowed version of
- * cargo's own dirty-check before we invoke it. A null scan (e.g. no git
- * repo) means we can't verify, and we fall back to cargo's --allow-dirty.
- *
- * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
- * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't
- * drive the exchange -- it just reads the env var the workflow wired
- * up (same for classic token fallback).
+ * crates.io handler (#16; plan §7.4, §13.1, §14.5, §16.1). `--allow-dirty`
+ * is required by the writeVersion-then-publish model (#135), so
+ * `scanDirtyOutsideManifest` reinstates a narrowed dirty-check. stderr is
+ * elided mid-message (#651): GitHub cuts a log line at 64KB from the *front*.
  */
 import { readFile } from 'node:fs/promises';
 import { join, relative } from 'node:path';
@@ -117,18 +86,10 @@ async function publishImpl(pkg, version, ctx) {
     if (await isPublishedImpl(pkg, version, ctx)) {
         return { status: 'already-published' };
     }
-    // #135: --allow-dirty disarms cargo's own "is the tree clean?" guard.
-    // Reinstate a narrower check: only the Cargo.toml we just wrote may
-    // be dirty. Anything else = a bug or a stray edit that would end up
-    // in the crate tarball. Published crates can't be unpublished.
-    //
-    // Sibling package paths are whitelisted: a polyglot consumer with
-    // rust + js packages will have install state (node_modules/, dist/,
-    // package-lock.json) inside the js package's path during publish
-    // (the reusable workflow's `Build npm packages` step runs
-    // `npm install + npm run build` per npm package before the engine
-    // publishes). cargo only packs files inside its own package dir, so
-    // sibling-package state can't end up in the crate tarball anyway.
+    // #135: --allow-dirty disarms cargo's own clean-tree guard, so reinstate a
+    // narrower one — only the Cargo.toml we just wrote may be dirty. Sibling
+    // package paths are whitelisted: a polyglot consumer's js package carries
+    // install state during publish, and cargo only packs its own package dir.
     const unexpected = await scanDirtyOutsideManifest(ctx.cwd, pkg.path, ctx.artifactsRoot, ctx.siblingPackagePaths, ctx.managedManifestPaths);
     if (unexpected !== null && unexpected.length > 0) {
         throw new Error([

package/dist/handlers/crates.js.map

@@ -1 +1 @@
-{"version":3,"file":"crates.js","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,KAAK,UAAU,eAAe,CAC5B,GAAqC,EACrC,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE;KACtC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;IACvC,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,qBAAqB;IACrB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAqB,EACrB,OAAe,EACf,GAAQ;IAER,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,0EAA0E;IAC1E,kEAAkE;IAClE,iDAAiD;IACjD,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,kBAAkB;IAClB,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CACjF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAuG,EACvG,OAAe,EACf,GAAQ;IAER,IAAI,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,EAAE;IACF,kEAAkE;IAClE,oEAAoE;IACpE,iEAAiE;IACjE,0DAA0D;IAC1D,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,oBAAoB,CACzB,CAAC;IACF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb;YACE,0FAA0F,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,GAAG;YAClJ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,gIAAgI;SACjI,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAG,KAAK,EAAE,WAAoB,EAAiB,EAAE;QAC/D,6DAA6D;QAC7D,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,4DAA4D;QAC5D,+DAA+D;QAC/D,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,+BAA+B,CAAC;YACnF,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,4DAA4D;YAC5D,gEAAgE;YAChE,gEAAgE;YAChE,+BAA+B;YAC/B,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,yDAAyD;QACzD,6CAA6C;QAC7C,IACE,eAAe,KAAK,SAAS;YAC7B,WAAW,KAAK,SAAS;YACzB,aAAa,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,mCAAmC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD,WAAW,+CAA+C,CACjH,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,MAAM,WAAW,GAAG,QAAQ,YAAY,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvF,MAAM,SAAS,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClF,MAAM,IAAI,KAAK,CACb,2BAA2B,WAAW,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,EAAE,EACpH,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;aACvF,CAAC;QACJ,CAAC;QACD,+DAA+D;QAC/D,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb;gBACE,IAAI,UAAU,CAAC,gCAAgC,mDAAmD,YAAY,CAAC,GAAG,CAAC,+CAA+C;gBAClK,yIAAyI;gBACzI,uJAAuJ;gBACvJ,2BAA2B,WAAW,CAAC,QAAQ,CAAC,EAAE;aACnD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAC3E,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,GAAG,EAAE,eAAe;YAClB,CAAC,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;YACvF,CAAC,CAAC,GAAG,QAAQ,WAAW,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;IAC5B,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,6EAA6E;AAE7E;oCACoC;AACpC,SAAS,YAAY,CAAC,GAAqC;IACzD,OAAO,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,eAAe;IACf,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAqC,EACrC,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC3E,OAAO,IAAI,CAAC,KAAK,EAAE,cAAc,IAAI,IAAI,CAAC;IAC5C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAqC,EACrC,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;QAC7E,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAY;IAC7B,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,eAAe;IAC5B,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B,OAAO,EAAE,WAAW;CACrB,CAAC"}
+{"version":3,"file":"crates.js","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,KAAK,UAAU,eAAe,CAC5B,GAAqC,EACrC,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE;KACtC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;IACvC,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,qBAAqB;IACrB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAqB,EACrB,OAAe,EACf,GAAQ;IAER,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,0EAA0E;IAC1E,kEAAkE;IAClE,iDAAiD;IACjD,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,kBAAkB;IAClB,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CACjF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAuG,EACvG,OAAe,EACf,GAAQ;IAER,IAAI,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,oBAAoB,CACzB,CAAC;IACF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb;YACE,0FAA0F,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,GAAG;YAClJ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,gIAAgI;SACjI,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAG,KAAK,EAAE,WAAoB,EAAiB,EAAE;QAC/D,6DAA6D;QAC7D,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,4DAA4D;QAC5D,+DAA+D;QAC/D,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,+BAA+B,CAAC;YACnF,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,4DAA4D;YAC5D,gEAAgE;YAChE,gEAAgE;YAChE,+BAA+B;YAC/B,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,yDAAyD;QACzD,6CAA6C;QAC7C,IACE,eAAe,KAAK,SAAS;YAC7B,WAAW,KAAK,SAAS;YACzB,aAAa,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,mCAAmC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD,WAAW,+CAA+C,CACjH,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,MAAM,WAAW,GAAG,QAAQ,YAAY,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvF,MAAM,SAAS,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClF,MAAM,IAAI,KAAK,CACb,2BAA2B,WAAW,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,EAAE,EACpH,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;aACvF,CAAC;QACJ,CAAC;QACD,+DAA+D;QAC/D,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb;gBACE,IAAI,UAAU,CAAC,gCAAgC,mDAAmD,YAAY,CAAC,GAAG,CAAC,+CAA+C;gBAClK,yIAAyI;gBACzI,uJAAuJ;gBACvJ,2BAA2B,WAAW,CAAC,QAAQ,CAAC,EAAE;aACnD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAC3E,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,GAAG,EAAE,eAAe;YAClB,CAAC,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;YACvF,CAAC,CAAC,GAAG,QAAQ,WAAW,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;IAC5B,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,6EAA6E;AAE7E;oCACoC;AACpC,SAAS,YAAY,CAAC,GAAqC;IACzD,OAAO,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,eAAe;IACf,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAqC,EACrC,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC3E,OAAO,IAAI,CAAC,KAAK,EAAE,cAAc,IAAI,IAAI,CAAC;IAC5C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAqC,EACrC,OAAe,EACf,IAAS;IAET,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;QAC7E,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAY;IAC7B,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,eAAe;IAC5B,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B,OAAO,EAAE,WAAW;CACrB,CAAC"}

package/dist/handlers/first-file-under.d.ts

@@ -1,16 +1,8 @@
 /**
  * Depth-first search for the first of `candidates` under `dir` that is an
- * actual file, returned as a **posix** path relative to `dir` (or
- * `undefined` when the whole subtree holds no file).
- *
- * Exists because a build step may stage a payload either flat
- * (`<artifact>/<bin>`) or nested (`<artifact>/bin/<bin>`), and callers that
- * name that payload in a package manifest — or chmod it — need a file, not
- * whichever directory `readdir` happened to list first (#626).
- *
- * Posix separators on purpose: the result lands in `package.json#main`,
- * which npm reads on every platform, so a back-slashed `join` would ship a
- * manifest that only resolves on Windows.
+ * actual file, as a **posix** path relative to `dir` (#626) — a build step may
+ * stage a payload flat or nested, and the result lands in `package.json#main`,
+ * so a back-slashed `join` would ship a manifest that only resolves on Windows.
  */
 export declare function firstFileUnder(dir: string, candidates: readonly string[]): Promise<string | undefined>;
 //# sourceMappingURL=first-file-under.d.ts.map

package/dist/handlers/first-file-under.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"first-file-under.d.ts","sourceRoot":"","sources":["../../src/handlers/first-file-under.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}
+{"version":3,"file":"first-file-under.d.ts","sourceRoot":"","sources":["../../src/handlers/first-file-under.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}

package/dist/handlers/first-file-under.js

@@ -1,16 +1,8 @@
 /**
  * Depth-first search for the first of `candidates` under `dir` that is an
- * actual file, returned as a **posix** path relative to `dir` (or
- * `undefined` when the whole subtree holds no file).
- *
- * Exists because a build step may stage a payload either flat
- * (`<artifact>/<bin>`) or nested (`<artifact>/bin/<bin>`), and callers that
- * name that payload in a package manifest — or chmod it — need a file, not
- * whichever directory `readdir` happened to list first (#626).
- *
- * Posix separators on purpose: the result lands in `package.json#main`,
- * which npm reads on every platform, so a back-slashed `join` would ship a
- * manifest that only resolves on Windows.
+ * actual file, as a **posix** path relative to `dir` (#626) — a build step may
+ * stage a payload flat or nested, and the result lands in `package.json#main`,
+ * so a back-slashed `join` would ship a manifest that only resolves on Windows.
  */
 import { readdir, stat } from 'node:fs/promises';
 import { join } from 'node:path';

package/dist/handlers/first-file-under.js.map

@@ -1 +1 @@
-{"version":3,"file":"first-file-under.js","sourceRoot":"","sources":["../../src/handlers/first-file-under.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,UAA6B;IAE7B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"first-file-under.js","sourceRoot":"","sources":["../../src/handlers/first-file-under.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,UAA6B;IAE7B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/handlers/match-first-publish-tp-rejection.d.ts

@@ -1,20 +1,8 @@
 /**
- * Match cargo's stderr shape when crates.io rejects the TP exchange because
- * the crate has never been published, and return the evidence. The fixture at
- * `tests/integration/fixtures/registry-responses/crates-io/publish-first-publish-tp-rejected.txt`
- * captures the canonical shape; the catalog at `notes/upstream-behaviors.md`
- * is the source of truth for the contract.
- *
- * Two anchors keep false positives out: a 404-status line and either the
- * registry's "crate `<name>` does not exist" prose or the "trusted publish"
- * mention. An unrelated 404 in some other cargo subcommand (e.g. a missing
- * index file) won't carry the prose; an unrelated `does not exist` (e.g. a
- * missing dependency) won't carry the 404 status.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match cargo's stderr when crates.io rejects the TP exchange because the crate
+ * has never been published; returns the matched `stderr` verbatim, else `null`.
+ * Two anchors keep false positives out: a 404-status line *plus* either
+ * "crate `<name>` does not exist" or "trusted publish" (notes/upstream-behaviors.md).
  */
 export declare function matchFirstPublishTpRejection(stderr: string | undefined): string | null;
 //# sourceMappingURL=match-first-publish-tp-rejection.d.ts.map

package/dist/handlers/match-first-publish-tp-rejection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"match-first-publish-tp-rejection.d.ts","sourceRoot":"","sources":["../../src/handlers/match-first-publish-tp-rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMtF"}
+{"version":3,"file":"match-first-publish-tp-rejection.d.ts","sourceRoot":"","sources":["../../src/handlers/match-first-publish-tp-rejection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMtF"}

package/dist/handlers/match-first-publish-tp-rejection.js

@@ -1,20 +1,8 @@
 /**
- * Match cargo's stderr shape when crates.io rejects the TP exchange because
- * the crate has never been published, and return the evidence. The fixture at
- * `tests/integration/fixtures/registry-responses/crates-io/publish-first-publish-tp-rejected.txt`
- * captures the canonical shape; the catalog at `notes/upstream-behaviors.md`
- * is the source of truth for the contract.
- *
- * Two anchors keep false positives out: a 404-status line and either the
- * registry's "crate `<name>` does not exist" prose or the "trusted publish"
- * mention. An unrelated 404 in some other cargo subcommand (e.g. a missing
- * index file) won't carry the prose; an unrelated `does not exist` (e.g. a
- * missing dependency) won't carry the 404 status.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match cargo's stderr when crates.io rejects the TP exchange because the crate
+ * has never been published; returns the matched `stderr` verbatim, else `null`.
+ * Two anchors keep false positives out: a 404-status line *plus* either
+ * "crate `<name>` does not exist" or "trusted publish" (notes/upstream-behaviors.md).
  */
 export function matchFirstPublishTpRejection(stderr) {
     return stderr?.match(/status\s+404\b/i) &&

package/dist/handlers/match-first-publish-tp-rejection.js.map

@@ -1 +1 @@
-{"version":3,"file":"match-first-publish-tp-rejection.js","sourceRoot":"","sources":["../../src/handlers/match-first-publish-tp-rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA0B;IACrE,OAAO,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC;QACrC,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"match-first-publish-tp-rejection.js","sourceRoot":"","sources":["../../src/handlers/match-first-publish-tp-rejection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA0B;IACrE,OAAO,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC;QACrC,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/handlers/match-npm-name-too-similar.d.ts

@@ -1,29 +1,8 @@
 /**
- * Match npm's stderr shape when the registry refuses to *create* a package
- * name under its moniker rule, and return the evidence. The fixture at
- * `tests/integration/fixtures/registry-responses/npm/publish-e403-name-too-similar.txt`
- * captures the canonical shape; the catalog at `notes/upstream-behaviors.md`
- * is the source of truth for the contract.
- *
- * One anchor, not two. The crates-side `matchFirstPublishTpRejection` needs a
- * pair because each of its anchors ("status 404", "does not exist") is generic
- * enough to appear in unrelated cargo output; npm's "Package name too similar
- * to existing package…" prose is already unique to this refusal, and pairing
- * it with the `E403` code would only make the matcher miss the day npm
- * renumbers the response. Both known wordings — the one that names the
- * blocking package and the plural "existing packages" variant — differ only
- * after this prefix.
- *
- * Matching on the prose is the whole point: the refusal arrives auth-shaped
- * (E403 / "Forbidden"), so status-code matching cannot tell it apart from an
- * ordinary permission failure. That confusion is #617 — the engine read one
- * as the other and told an operator to bootstrap with a token, for a name no
- * token can create.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match npm's stderr when the registry refuses to *create* a name under its
+ * moniker rule ("Package name too similar to existing package…"), returning
+ * the matched `stderr` verbatim, else `null`. Prose, not status code: the
+ * refusal arrives auth-shaped (E403 / "Forbidden"), so #617 misread it.
  */
 export declare function matchNpmNameTooSimilar(stderr: string | undefined): string | null;
 //# sourceMappingURL=match-npm-name-too-similar.d.ts.map

package/dist/handlers/match-npm-name-too-similar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"match-npm-name-too-similar.d.ts","sourceRoot":"","sources":["../../src/handlers/match-npm-name-too-similar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIhF"}
+{"version":3,"file":"match-npm-name-too-similar.d.ts","sourceRoot":"","sources":["../../src/handlers/match-npm-name-too-similar.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIhF"}

package/dist/handlers/match-npm-name-too-similar.js

@@ -1,29 +1,8 @@
 /**
- * Match npm's stderr shape when the registry refuses to *create* a package
- * name under its moniker rule, and return the evidence. The fixture at
- * `tests/integration/fixtures/registry-responses/npm/publish-e403-name-too-similar.txt`
- * captures the canonical shape; the catalog at `notes/upstream-behaviors.md`
- * is the source of truth for the contract.
- *
- * One anchor, not two. The crates-side `matchFirstPublishTpRejection` needs a
- * pair because each of its anchors ("status 404", "does not exist") is generic
- * enough to appear in unrelated cargo output; npm's "Package name too similar
- * to existing package…" prose is already unique to this refusal, and pairing
- * it with the `E403` code would only make the matcher miss the day npm
- * renumbers the response. Both known wordings — the one that names the
- * blocking package and the plural "existing packages" variant — differ only
- * after this prefix.
- *
- * Matching on the prose is the whole point: the refusal arrives auth-shaped
- * (E403 / "Forbidden"), so status-code matching cannot tell it apart from an
- * ordinary permission failure. That confusion is #617 — the engine read one
- * as the other and told an operator to bootstrap with a token, for a name no
- * token can create.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match npm's stderr when the registry refuses to *create* a name under its
+ * moniker rule ("Package name too similar to existing package…"), returning
+ * the matched `stderr` verbatim, else `null`. Prose, not status code: the
+ * refusal arrives auth-shaped (E403 / "Forbidden"), so #617 misread it.
  */
 export function matchNpmNameTooSimilar(stderr) {
     return stderr?.match(/package\s+name\s+too\s+similar\s+to\s+existing\s+packages?/i)

package/dist/handlers/match-npm-name-too-similar.js.map

@@ -1 +1 @@
-{"version":3,"file":"match-npm-name-too-similar.js","sourceRoot":"","sources":["../../src/handlers/match-npm-name-too-similar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,EAAE,KAAK,CAAC,6DAA6D,CAAC;QACjF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"match-npm-name-too-similar.js","sourceRoot":"","sources":["../../src/handlers/match-npm-name-too-similar.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,EAAE,KAAK,CAAC,6DAA6D,CAAC;QACjF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/handlers/match-tlog-duplicate.d.ts

@@ -1,17 +1,8 @@
 /**
- * Match npm's Sigstore/Rekor transparency-log dedupe error and return the
- * evidence. The retry-on-transient-network-error that produces the
- * publish-over race also re-submits an identical `--provenance` attestation;
- * Rekor rejects the duplicate with `TLOG_CREATE_ENTRY_ERROR` / "an
- * equivalent entry already exists in the transparency log". Unlike the
- * publish-over race, a 409 here does NOT by itself prove the package landed
- * (the first submit may have written the Rekor entry but failed the registry
- * PUT), so callers must re-probe `npm view` to disambiguate.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match npm's Sigstore/Rekor dedupe error (`TLOG_CREATE_ENTRY_ERROR` / "an
+ * equivalent entry already exists in the transparency log"); returns the
+ * matched `stderr`, else `null`. Does NOT prove the package landed — a Rekor
+ * entry can outlive a failed registry PUT — so callers must re-probe `npm view`.
  */
 export declare function matchTlogDuplicate(stderr: string | undefined): string | null;
 //# sourceMappingURL=match-tlog-duplicate.d.ts.map

package/dist/handlers/match-tlog-duplicate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"match-tlog-duplicate.d.ts","sourceRoot":"","sources":["../../src/handlers/match-tlog-duplicate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAM5E"}
+{"version":3,"file":"match-tlog-duplicate.d.ts","sourceRoot":"","sources":["../../src/handlers/match-tlog-duplicate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAM5E"}

package/dist/handlers/match-tlog-duplicate.js

@@ -1,17 +1,8 @@
 /**
- * Match npm's Sigstore/Rekor transparency-log dedupe error and return the
- * evidence. The retry-on-transient-network-error that produces the
- * publish-over race also re-submits an identical `--provenance` attestation;
- * Rekor rejects the duplicate with `TLOG_CREATE_ENTRY_ERROR` / "an
- * equivalent entry already exists in the transparency log". Unlike the
- * publish-over race, a 409 here does NOT by itself prove the package landed
- * (the first submit may have written the Rekor entry but failed the registry
- * PUT), so callers must re-probe `npm view` to disambiguate.
- *
- * Returns the matched `stderr` verbatim (always non-empty, since the pattern
- * cannot match an empty string) so callers can hoist it into the surfaced
- * error without a dead empty-string fallback; returns `null` when the shape
- * does not match or `stderr` is absent.
+ * Match npm's Sigstore/Rekor dedupe error (`TLOG_CREATE_ENTRY_ERROR` / "an
+ * equivalent entry already exists in the transparency log"); returns the
+ * matched `stderr`, else `null`. Does NOT prove the package landed — a Rekor
+ * entry can outlive a failed registry PUT — so callers must re-probe `npm view`.
  */
 export function matchTlogDuplicate(stderr) {
     return stderr?.match(/TLOG_CREATE_ENTRY_ERROR|equivalent entry already exists in the transparency log/i)

package/dist/handlers/match-tlog-duplicate.js.map

@@ -1 +1 @@
-{"version":3,"file":"match-tlog-duplicate.js","sourceRoot":"","sources":["../../src/handlers/match-tlog-duplicate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,MAAM,EAAE,KAAK,CAClB,kFAAkF,CACnF;QACC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"match-tlog-duplicate.js","sourceRoot":"","sources":["../../src/handlers/match-tlog-duplicate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,MAAM,EAAE,KAAK,CAClB,kFAAkF,CACnF;QACC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/handlers/npm-platform.d.ts

@@ -1,26 +1,8 @@
 /**
  * npm platform-package orchestration for `build = "napi"` and
- * `build = "bundled-cli"`.
- *
- * Flow per plan §13.7:
- *   1. For each (build entry, target), synthesize a per-platform package
- *      with narrowed os/cpu fields and the platform binary.
- *   2. Publish each per-platform package (skip already-published).
- *   3. Rewrite the main package's `package.json` to add
- *      `optionalDependencies` pointing at the just-published versions
- *      across every build entry's family.
- *   4. Caller (npm.ts:publishImpl) publishes the main package last.
- *
- * Ordering is enforced: a failed platform publish short-circuits
- * before step 3, so the main package isn't published in an
- * inconsistent state.
- *
- * Multi-mode (#dirsql): when `build` is an array with more than one
- * entry, each entry contributes its own platform-package family. The
- * artifact directory for each (mode, triple) carries a mode infix to
- * keep `napi` and `bundled-cli` artifacts distinct on the build side.
- *
- * Issue #19. Plan: §13.7, §12.2.
+ * `build = "bundled-cli"` (#19; plan §13.7, §12.2). Ordering is enforced: a
+ * failed platform publish short-circuits before the main `package.json` gains
+ * its `optionalDependencies`, so the main package never ships inconsistent.
  */
 import type { Ctx } from '../types.js';
 export type NpmBuildMode = 'napi' | 'bundled-cli';
@@ -126,34 +108,17 @@ export declare function targetToOsCpu(target: string): OsCpu;
  */
 export declare function assertTripleSupported(triple: string, packageName: string): void;
 /**
- * Resolve a target triple to its Rust (rustup/cargo) form.
- *
- * - napi-rs short form (`linux-x64-gnu`) → its Rust triple
- *   (`x86_64-unknown-linux-gnu`).
- * - a Rust triple → itself (identity), so rust-flavor `targets` pass
- *   through untouched.
- * - anything else throws, matching `targetToOsCpu`'s posture: an
- *   unmappable triple fails loud at plan time rather than reaching
- *   `rustup target add` with a triple it rejects (#387).
- *
- * Lookup is case-insensitive, mirroring `targetToOsCpu`.
+ * Resolve a target triple to its Rust (rustup/cargo) form: a napi-rs short
+ * form (`linux-x64-gnu`) maps to its Rust triple, a Rust triple is identity,
+ * and anything else throws so an unmappable triple fails at plan time rather
+ * than reaching `rustup target add` (#387). Case-insensitive.
  */
 export declare function toRustTriple(target: string): string;
 /**
- * The package-relative path `package.json#main` should name, given the
- * entries of a staged platform artifact (`dir`, its `files` listing) and
- * the build mode that produced it.
- *
- * `bundled-cli` resolves through directories to an actual file: consumers
- * stage the cross-compiled binary either flat (`<artifact>/<bin>`) or
- * nested (`<artifact>/bin/<bin>`), and both layouts clear the completeness
- * check, which lists files recursively. Taking `readdir`'s first
- * non-`package.json` entry as-is named the `bin` **directory** on the
- * nested layout — so the manifest pointed `main` at a directory and the
- * #365 executable-bit restore chmodded that directory instead of the
- * binary, publishing it at 0644 (#626).
- *
- * `napi` is unaffected: it looks up the `.node` payload by extension.
+ * The package-relative path `package.json#main` should name for a staged
+ * platform artifact. `bundled-cli` resolves through directories to a real
+ * file: on the nested `<artifact>/bin/<bin>` layout `readdir`'s first entry is
+ * the `bin` **directory**, which #365's chmod then restored at 0644 (#626).
  */
 export declare function pickMainFile(dir: string, files: readonly string[], mode: NpmBuildMode): Promise<string>;
 export {};

package/dist/handlers/npm-platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-platform.d.ts","sourceRoot":"","sources":["../../src/handlers/npm-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAMvC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,aAAa,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD;;;0DAG0D;AAC1D,eAAO,MAAM,sBAAsB,sDAAuD,CAAC;AAE3F;;sEAEsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uEAAuE;AACvE,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,SAAS,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,GAChE,SAAS,CAAC;AAEd;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,aAAa,EAAE,CAQ7E;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,6EAA6E;IAC7E,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsDrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GACzD,MAAM,CAsBR;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,GACf,MAAM,CAGR;AAwKD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG5E;AAmDD,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AA8CD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAQnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAM/E;AAmCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAanD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,MAAM,CAAC,CAcjB"}
+{"version":3,"file":"npm-platform.d.ts","sourceRoot":"","sources":["../../src/handlers/npm-platform.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAMvC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,aAAa,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD;;;0DAG0D;AAC1D,eAAO,MAAM,sBAAsB,sDAAuD,CAAC;AAE3F;;sEAEsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uEAAuE;AACvE,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,SAAS,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,GAChE,SAAS,CAAC;AAEd;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,aAAa,EAAE,CAQ7E;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,6EAA6E;IAC7E,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsDrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GACzD,MAAM,CAsBR;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,GACf,MAAM,CAGR;AAwKD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG5E;AAmDD,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AA8CD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAQnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAM/E;AAmCD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAanD;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,MAAM,CAAC,CAcjB"}