putitoutthere 0.3.25 → 0.3.27

package/dist/log.js

@@ -1,37 +1,10 @@
 /**
- * Structured logger for putitoutthere.
- *
- * JSON-per-line output in CI; human-readable text in TTYs. Every emitted
- * line is passed through a redactor that replaces any occurrence of a
- * known-secret env value (keys matching *TOKEN* / *SECRET* / *PASSWORD*
- * / *KEY* / *PASS* / *PAT*, case-insensitive) with `[REDACTED:<digest>]`,
- * where `<digest>` is a stable 8-hex-char SHA-256 prefix (#134).
- * Operators can correlate rotated tokens across log lines without ever
- * seeing the value.
- *
- * Substring redaction (rather than Pino-style field-path redaction) is
- * deliberate: handlers capture child-process stdout/stderr and feed it
- * through the logger. A token leaked inside that stream must not escape
- * to CI logs regardless of which field it ended up in.
- *
- * Sources scanned:
- *  - `process.env` (always)
- *  - any additional `envSources` passed to `createLogger` (#136), so
- *    credentials injected into a per-call `ctx.env` object (rather than
- *    the process env) are redacted too.
- *
- * Performance (#141): the redaction set is cached per-source object by
- * identity in a WeakMap, keyed by a cheap content signature. Back-to-back
- * log calls re-use the cached entries; env is re-walked only when a
- * source object's size/contents change.
- *
- * Length floor (#137): values shorter than 8 chars are skipped even when
- * their env-var name matches a known-secret pattern. Real registry
- * tokens comfortably clear this; short values (`CI=1`, a boolean flag)
- * cause far more harm by mangling every occurrence of that character in
- * the log stream than they are worth defending as credentials.
- *
- * Issue #11. Plan: §22.2, §22.5.
+ * Structured logger (#11). JSON-per-line in CI, text in TTYs. Redaction is
+ * substring-based, not field-path based, since handlers pipe child-process
+ * output through here: secret-shaped env values (from `process.env` plus any
+ * `envSources` given to `createLogger`, #136) become `[REDACTED:<digest>]`, a
+ * stable 8-hex SHA-256 prefix (#134). Values under 8 chars are skipped —
+ * mangling `CI=1` costs more than it protects (#137).
  */
 import { createHash } from 'node:crypto';
 const LEVEL_ORDER = {
@@ -87,30 +60,10 @@ function formatScalar(v) {
 }
 /* ----------------------------- redaction ----------------------------- */
 /**
- * Credential-shaped env-var name matcher. Requires word boundaries
- * (`_` or start/end of string) so non-credential names that happen to
- * contain a credential substring aren't caught as false positives.
- *
- * Matches (spot-check):
- *   GITHUB_TOKEN, PYPI_API_TOKEN, NODE_AUTH_TOKEN, CARGO_REGISTRY_TOKEN,
- *   SECRET, JWT_SECRET, CLIENT_SECRET, NPM_PASSWORD, MY_PAT, GH_PAT,
- *   SSH_KEY, API_KEY, SECRET_KEY, PRIVATE_KEY.
- *
- * Explicitly rejects (regression fixtures for #196):
- *   KEYCLOAK_URL, KEYCLOAK_REALM, TOKENIZER_MODEL, TOKENS_PER_SECOND,
- *   PUBLIC_KEY_PATH, PUBLIC_KEY_FILE, PASSTHROUGH, PASSPORT_URL,
- *   PATHWAY_URL, PATS_COUNT (prefix `PATS`, not a word-boundary `PAT`).
- *
- * Components:
- *   - `(^|_)(TOKEN|SECRET|PASSWORD|PAT)(_|$)` — the four unambiguous
- *     credential shapes, anchored by word boundaries on both sides.
- *   - `(^|_)[A-Z0-9]*KEY$` — trailing `KEY` segment. Allows `API_KEY`,
- *     `SECRET_KEY`, `SSH_KEY`, `APP_KEY_2048`-style. Rejects
- *     `KEY_PATH`, `KEYCLOAK_URL`, `PUBLIC_KEY_ALGORITHM`.
- *
- * `PASS` was previously in the substring set; dropped here because it
- * collides with every `PASSTHROUGH` / `BYPASS*` / `PASSPORT*` name.
- * Real credentials use `PASSWORD` or `PAT`; those remain matched.
+ * Credential-shaped env-var name matcher. Word boundaries (`_` or string
+ * edges) keep false positives out — `KEYCLOAK_URL`, `TOKENIZER_MODEL`,
+ * `PUBLIC_KEY_PATH`, `PASSTHROUGH`, `PATS_COUNT` must not match (#196).
+ * `PASS` is deliberately absent; `PASSWORD` and `PAT` cover real credentials.
  */
 const SECRET_KEY = /(?:^|_)(?:TOKEN|SECRET|PASSWORD|PAT)(?:_|$)|(?:^|_)[A-Z0-9]*KEY$/i;
 const MIN_OPAQUE_LEN = 8;

package/dist/log.js.map

@@ -1 +1 @@
-{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,WAAW,GAA0B;IACzC,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAiBF,MAAM,UAAU,YAAY,CAAC,OAAsB,EAAE;IACnD,+DAA+D;IAC/D,kDAAkD;IAClD,MAAM,MAAM,GAAa,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAyB;QACpC,OAAO,CAAC,GAAG;QACX,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;KAC3B,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,GAAW,EAAE,MAA+B,EAAQ,EAAE;QAChF,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAC5C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;QACvD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QACrD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QACrD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,MAAgB;IAC7B,OAAO,OAAO,CAAE,MAA8B,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;IAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAAA,OAAO,CAAC,CAAC;IAAA,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IACtF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,2EAA2E;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,GAAG,mEAAmE,CAAC;AACvF,MAAM,cAAc,GAAG,CAAC,CAAC;AAmBzB,MAAM,UAAU,GAAG,IAAI,OAAO,EAAsB,CAAC;AAErD,SAAS,UAAU,CAAC,GAAc;IAChC,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,MAAM,CAAC,MAAM,CAAC;IAAA,CAAC;IAEvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,+DAA+D;QAC/D,+DAA+D;QAC/D,SAAS;QACT,IAAI,CAAC,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpC,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,aAAa;QACb,IAAI,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,6DAA6D;IAC7D,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAY,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACvC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CACpB,CAAS,EACT,UAAgC,CAAC,OAAO,CAAC,GAAG,CAAC;IAE7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACjC,qEAAqE;YACrE,kEAAkE;YAClE,+DAA+D;YAC/D,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;yDAGyD;AACzD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,WAAW,GAA0B;IACzC,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAiBF,MAAM,UAAU,YAAY,CAAC,OAAsB,EAAE;IACnD,+DAA+D;IAC/D,kDAAkD;IAClD,MAAM,MAAM,GAAa,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAyB;QACpC,OAAO,CAAC,GAAG;QACX,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;KAC3B,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,GAAW,EAAE,MAA+B,EAAQ,EAAE;QAChF,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAC5C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;QACvD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QACrD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QACrD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,MAAgB;IAC7B,OAAO,OAAO,CAAE,MAA8B,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;IAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAAA,OAAO,CAAC,CAAC;IAAA,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IACtF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,2EAA2E;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,GAAG,mEAAmE,CAAC;AACvF,MAAM,cAAc,GAAG,CAAC,CAAC;AAYzB,MAAM,UAAU,GAAG,IAAI,OAAO,EAAsB,CAAC;AAErD,SAAS,UAAU,CAAC,GAAc;IAChC,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAAA,OAAO,MAAM,CAAC,MAAM,CAAC;IAAA,CAAC;IAEvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,+DAA+D;QAC/D,+DAA+D;QAC/D,SAAS;QACT,IAAI,CAAC,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpC,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,aAAa;QACb,IAAI,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,6DAA6D;IAC7D,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAY,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACvC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CACpB,CAAS,EACT,UAAgC,CAAC,OAAO,CAAC,GAAG,CAAC;IAE7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACjC,qEAAqE;YACrE,kEAAkE;YAClE,+DAA+D;YAC/D,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;yDAGyD;AACzD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/manylinux-for-triple.d.ts

@@ -1,10 +1,8 @@
 /**
- * #610: resolve which linux wheel rows a package's `manylinux` baseline
- * applies to. maturin-action's `manylinux` input selects a container per
- * libc family — `manylinux*` values only make sense for `-gnu` triples,
- * `musllinux_X_Y` values only for `-musl` triples — so a mismatched pair
- * (or any non-linux triple) gets no baseline and keeps today's host
- * build.
+ * #610: resolve which linux wheel rows a package's `manylinux` baseline applies
+ * to. maturin-action's `manylinux` input selects a container per libc family —
+ * `manylinux*` only for `-gnu` triples, `musllinux_X_Y` only for `-musl` — so a
+ * mismatched pair (or any non-linux triple) gets no baseline.
  */
 export declare function manylinuxForTriple(triple: string, manylinux: string | undefined): string | undefined;
 //# sourceMappingURL=manylinux-for-triple.d.ts.map

package/dist/manylinux-for-triple.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manylinux-for-triple.d.ts","sourceRoot":"","sources":["../src/manylinux-for-triple.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAcpB"}
+{"version":3,"file":"manylinux-for-triple.d.ts","sourceRoot":"","sources":["../src/manylinux-for-triple.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAcpB"}

package/dist/manylinux-for-triple.js

@@ -1,10 +1,8 @@
 /**
- * #610: resolve which linux wheel rows a package's `manylinux` baseline
- * applies to. maturin-action's `manylinux` input selects a container per
- * libc family — `manylinux*` values only make sense for `-gnu` triples,
- * `musllinux_X_Y` values only for `-musl` triples — so a mismatched pair
- * (or any non-linux triple) gets no baseline and keeps today's host
- * build.
+ * #610: resolve which linux wheel rows a package's `manylinux` baseline applies
+ * to. maturin-action's `manylinux` input selects a container per libc family —
+ * `manylinux*` only for `-gnu` triples, `musllinux_X_Y` only for `-musl` — so a
+ * mismatched pair (or any non-linux triple) gets no baseline.
  */
 export function manylinuxForTriple(triple, manylinux) {
     if (manylinux === undefined) {

package/dist/manylinux-for-triple.js.map

@@ -1 +1 @@
-{"version":3,"file":"manylinux-for-triple.js","sourceRoot":"","sources":["../src/manylinux-for-triple.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,SAA6B;IAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,gBAAgB,GAAG,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5D,0DAA0D;IAC1D,+DAA+D;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"manylinux-for-triple.js","sourceRoot":"","sources":["../src/manylinux-for-triple.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,SAA6B;IAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,gBAAgB,GAAG,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5D,0DAA0D;IAC1D,+DAA+D;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/must-get.d.ts

@@ -1,19 +1,8 @@
 /**
  * Read a key whose presence the caller's construction guarantees, throwing if
- * it is absent.
- *
- * `Map.get` widens its result to `V | undefined` even for a map the caller
- * seeded with every key it will ever read. Left to each call site, that gap
- * is papered over with an unreachable `?? default` fallback whose alternate
- * branch the 100%-coverage floor can never exercise — so it must be hidden
- * behind a `v8 ignore` marker. Routing the lookup through this one helper
- * tests the absent-key arm once, here, turning a broken seeding invariant
- * into a diagnosable throw instead of a silently-swallowed default. #577.
- *
- * A present key returns its stored value by reference (an empty array is a
- * value, not an absence, so it comes back untouched); an absent key throws
- * an error naming the offending key. The message is built here, so call
- * sites pass no string literal whose absent-path-only mutation could survive.
+ * it is absent. `Map.get` widens to `V | undefined` even for a totally-seeded
+ * map, and the usual `?? default` papers over a broken invariant with a branch
+ * no coverage floor can reach; this tests the absent arm once, here. #577.
  */
 export declare function mustGet<K, V>(map: ReadonlyMap<K, V>, key: K): V;
 //# sourceMappingURL=must-get.d.ts.map

package/dist/must-get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"must-get.d.ts","sourceRoot":"","sources":["../src/must-get.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAM/D"}
+{"version":3,"file":"must-get.d.ts","sourceRoot":"","sources":["../src/must-get.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAM/D"}

package/dist/must-get.js

@@ -1,19 +1,8 @@
 /**
  * Read a key whose presence the caller's construction guarantees, throwing if
- * it is absent.
- *
- * `Map.get` widens its result to `V | undefined` even for a map the caller
- * seeded with every key it will ever read. Left to each call site, that gap
- * is papered over with an unreachable `?? default` fallback whose alternate
- * branch the 100%-coverage floor can never exercise — so it must be hidden
- * behind a `v8 ignore` marker. Routing the lookup through this one helper
- * tests the absent-key arm once, here, turning a broken seeding invariant
- * into a diagnosable throw instead of a silently-swallowed default. #577.
- *
- * A present key returns its stored value by reference (an empty array is a
- * value, not an absence, so it comes back untouched); an absent key throws
- * an error naming the offending key. The message is built here, so call
- * sites pass no string literal whose absent-path-only mutation could survive.
+ * it is absent. `Map.get` widens to `V | undefined` even for a totally-seeded
+ * map, and the usual `?? default` papers over a broken invariant with a branch
+ * no coverage floor can reach; this tests the absent arm once, here. #577.
  */
 export function mustGet(map, key) {
     const value = map.get(key);

package/dist/must-get.js.map

@@ -1 +1 @@
-{"version":3,"file":"must-get.js","sourceRoot":"","sources":["../src/must-get.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,OAAO,CAAO,GAAsB,EAAE,GAAM;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"must-get.js","sourceRoot":"","sources":["../src/must-get.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAO,GAAsB,EAAE,GAAM;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/normalize-artifacts.d.ts

@@ -1,23 +1,8 @@
 /**
- * Single-artifact layout normalization.
- *
- * `actions/download-artifact@v8` is count-sensitive when called with
- * `path:` and no `name`/`pattern` filter: multiple artifacts get
- * per-artifact subdirectories (the documented multi-case the engine
- * relies on), but a *single* artifact extracts directly into the path
- * with no `<artifact_name>/` subdir. The completeness check
- * (`src/completeness.ts`) and every downstream handler reach for
- * `artifacts/<artifact_name>/...`, so consumers whose plan emits one
- * row — canonical case: pure-Python + `build = "setuptools"`, sdist
- * only — fail before any side effect runs.
- *
- * Rather than fight the action's per-count behavior in YAML (where the
- * subdir-vs-flat decision lives in upstream code we don't control),
- * normalize the layout in-process before completeness so the engine's
- * own contract is the single source of truth. The reusable workflow
- * calls into this via `publish.ts`; no consumer-facing surface.
- *
- * Issue #311.
+ * Single-artifact layout normalization (#311). `actions/download-artifact@v8`
+ * is count-sensitive with `path:` and no `name`/`pattern`: multiple artifacts
+ * get per-artifact subdirs, a *single* artifact extracts flat. Downstream
+ * expects `artifacts/<artifact_name>/...`, so one-row plans would fail.
  */
 import type { MatrixRow } from './plan.js';
 /**

package/dist/normalize-artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-artifacts.d.ts","sourceRoot":"","sources":["../src/normalize-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAyBf"}
+{"version":3,"file":"normalize-artifacts.d.ts","sourceRoot":"","sources":["../src/normalize-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/normalize-artifacts.js

@@ -1,23 +1,8 @@
 /**
- * Single-artifact layout normalization.
- *
- * `actions/download-artifact@v8` is count-sensitive when called with
- * `path:` and no `name`/`pattern` filter: multiple artifacts get
- * per-artifact subdirectories (the documented multi-case the engine
- * relies on), but a *single* artifact extracts directly into the path
- * with no `<artifact_name>/` subdir. The completeness check
- * (`src/completeness.ts`) and every downstream handler reach for
- * `artifacts/<artifact_name>/...`, so consumers whose plan emits one
- * row — canonical case: pure-Python + `build = "setuptools"`, sdist
- * only — fail before any side effect runs.
- *
- * Rather than fight the action's per-count behavior in YAML (where the
- * subdir-vs-flat decision lives in upstream code we don't control),
- * normalize the layout in-process before completeness so the engine's
- * own contract is the single source of truth. The reusable workflow
- * calls into this via `publish.ts`; no consumer-facing surface.
- *
- * Issue #311.
+ * Single-artifact layout normalization (#311). `actions/download-artifact@v8`
+ * is count-sensitive with `path:` and no `name`/`pattern`: multiple artifacts
+ * get per-artifact subdirs, a *single* artifact extracts flat. Downstream
+ * expects `artifacts/<artifact_name>/...`, so one-row plans would fail.
  */
 import { mkdir, readdir, rename } from 'node:fs/promises';
 import { join } from 'node:path';

package/dist/normalize-artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-artifacts.js","sourceRoot":"","sources":["../src/normalize-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA4B,EAC5B,aAAqB;IAErB,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAC3E,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IACzD,iEAAiE;IACjE,mEAAmE;IACnE,yDAAyD;IACzD,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAElC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}
+{"version":3,"file":"normalize-artifacts.js","sourceRoot":"","sources":["../src/normalize-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA4B,EAC5B,aAAqB;IAErB,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAC3E,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IACzD,iEAAiE;IACjE,mEAAmE;IACnE,yDAAyD;IACzD,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAElC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/normalize-dist-name.d.ts

@@ -1,17 +1,8 @@
 /**
- * The canonical distribution name a `[build-system].requires` entry names.
- *
- * A requirement string is a name plus decoration — `"setuptools_scm>=8"`,
- * `"setuptools-scm[toml]>=8"`, `"hatch-vcs ; python_version < '3.9'"`,
- * `"pkg@https://example/sdist.tar.gz"` — so the name is everything before
- * the first specifier, extra, marker, or direct-reference character. That
- * name is then normalised per PEP 503: case-folded, with runs of `-`, `_`
- * and `.` collapsed to a single `-`, which is what makes `setuptools_scm`
- * and `Setuptools-SCM` the same distribution as `setuptools-scm` (#696).
- *
- * Returns the empty string for an entry that is nothing but decoration.
- *
- * Pure — no I/O, so it stays sync per the engine's async convention.
+ * The canonical distribution name a `[build-system].requires` entry names: the
+ * text before the first specifier, extra, marker or direct-reference char, then
+ * PEP 503-normalised (case-folded, runs of `-`/`_`/`.` collapsed to `-`), which
+ * is what makes `setuptools_scm` and `Setuptools-SCM` the same name (#696).
  */
 export declare function normalizeDistName(requirement: string): string;
 //# sourceMappingURL=normalize-dist-name.d.ts.map

package/dist/normalize-dist-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-dist-name.d.ts","sourceRoot":"","sources":["../src/normalize-dist-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAM7D"}
+{"version":3,"file":"normalize-dist-name.d.ts","sourceRoot":"","sources":["../src/normalize-dist-name.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAM7D"}

package/dist/normalize-dist-name.js

@@ -1,17 +1,8 @@
 /**
- * The canonical distribution name a `[build-system].requires` entry names.
- *
- * A requirement string is a name plus decoration — `"setuptools_scm>=8"`,
- * `"setuptools-scm[toml]>=8"`, `"hatch-vcs ; python_version < '3.9'"`,
- * `"pkg@https://example/sdist.tar.gz"` — so the name is everything before
- * the first specifier, extra, marker, or direct-reference character. That
- * name is then normalised per PEP 503: case-folded, with runs of `-`, `_`
- * and `.` collapsed to a single `-`, which is what makes `setuptools_scm`
- * and `Setuptools-SCM` the same distribution as `setuptools-scm` (#696).
- *
- * Returns the empty string for an entry that is nothing but decoration.
- *
- * Pure — no I/O, so it stays sync per the engine's async convention.
+ * The canonical distribution name a `[build-system].requires` entry names: the
+ * text before the first specifier, extra, marker or direct-reference char, then
+ * PEP 503-normalised (case-folded, runs of `-`/`_`/`.` collapsed to `-`), which
+ * is what makes `setuptools_scm` and `Setuptools-SCM` the same name (#696).
  */
 export function normalizeDistName(requirement) {
     return requirement

package/dist/normalize-dist-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-dist-name.js","sourceRoot":"","sources":["../src/normalize-dist-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,WAAW;SACf,IAAI,EAAE;SACN,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;SACnC,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"normalize-dist-name.js","sourceRoot":"","sources":["../src/normalize-dist-name.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,WAAW;SACf,IAAI,EAAE;SACN,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;SACnC,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/packages-by-name.d.ts

@@ -1,17 +1,9 @@
 import type { Package } from './config.js';
 /**
- * Index packages by their `name` for O(1) lookup.
- *
- * Package names are unique — config load enforces it — so the returned map is
- * a total index over `packages`: every name maps to exactly its package, and
- * the map's size equals the list's length. Callers that look a planned name
- * back up (publish's auth pre-flight and publish loop) rely on that totality,
- * which is why the lookup goes through `mustGet` rather than a `?? default`.
- *
- * Extracted to its own file (#577) so the map-building `.map((p) => [p.name,
- * p])` is exercised by a colocated test that asserts the name→package
- * mapping directly, instead of being an inline expression whose only witness
- * is publish()'s far-downstream behavior.
+ * Index packages by their `name` for O(1) lookup. Names are unique (config load
+ * enforces it), so the map is a total index over `packages` — callers that look
+ * a planned name back up rely on that totality, which is why the lookup goes
+ * through `mustGet` rather than a `?? default` (#577).
  */
 export declare function packagesByName(packages: readonly Package[]): Map<string, Package>;
 //# sourceMappingURL=packages-by-name.d.ts.map

package/dist/packages-by-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"packages-by-name.d.ts","sourceRoot":"","sources":["../src/packages-by-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjF"}
+{"version":3,"file":"packages-by-name.d.ts","sourceRoot":"","sources":["../src/packages-by-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjF"}

package/dist/packages-by-name.js

@@ -1,16 +1,8 @@
 /**
- * Index packages by their `name` for O(1) lookup.
- *
- * Package names are unique — config load enforces it — so the returned map is
- * a total index over `packages`: every name maps to exactly its package, and
- * the map's size equals the list's length. Callers that look a planned name
- * back up (publish's auth pre-flight and publish loop) rely on that totality,
- * which is why the lookup goes through `mustGet` rather than a `?? default`.
- *
- * Extracted to its own file (#577) so the map-building `.map((p) => [p.name,
- * p])` is exercised by a colocated test that asserts the name→package
- * mapping directly, instead of being an inline expression whose only witness
- * is publish()'s far-downstream behavior.
+ * Index packages by their `name` for O(1) lookup. Names are unique (config load
+ * enforces it), so the map is a total index over `packages` — callers that look
+ * a planned name back up rely on that totality, which is why the lookup goes
+ * through `mustGet` rather than a `?? default` (#577).
  */
 export function packagesByName(packages) {
     return new Map(packages.map((p) => [p.name, p]));

package/dist/packages-by-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"packages-by-name.js","sourceRoot":"","sources":["../src/packages-by-name.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"packages-by-name.js","sourceRoot":"","sources":["../src/packages-by-name.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/parse-reconcile-expect.d.ts

@@ -1,11 +1,8 @@
 /**
  * Grammar for `reconcile --expect`: a single `<name>@<version>`, or a JSON
  * array of `{name, version, ...}` matching the release job's
- * `delegated_packages` output verbatim (extra keys, e.g. `tag`, are
- * ignored) — so `pypi-tag.yml` can forward that output without reshaping
- * it in YAML.
- *
- * Issue #666.
+ * `delegated_packages` output verbatim (extra keys like `tag` are ignored), so
+ * `pypi-tag.yml` can forward that output without reshaping it. Issue #666.
  */
 export interface ExpectedPackage {
     name: string;

package/dist/parse-reconcile-expect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-reconcile-expect.d.ts","sourceRoot":"","sources":["../src/parse-reconcile-expect.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAgCnE"}
+{"version":3,"file":"parse-reconcile-expect.d.ts","sourceRoot":"","sources":["../src/parse-reconcile-expect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAgCnE"}

package/dist/parse-reconcile-expect.js

@@ -1,11 +1,8 @@
 /**
  * Grammar for `reconcile --expect`: a single `<name>@<version>`, or a JSON
  * array of `{name, version, ...}` matching the release job's
- * `delegated_packages` output verbatim (extra keys, e.g. `tag`, are
- * ignored) — so `pypi-tag.yml` can forward that output without reshaping
- * it in YAML.
- *
- * Issue #666.
+ * `delegated_packages` output verbatim (extra keys like `tag` are ignored), so
+ * `pypi-tag.yml` can forward that output without reshaping it. Issue #666.
  */
 import { toError } from './to-error.js';
 export function parseReconcileExpect(raw) {

package/dist/parse-reconcile-expect.js.map

@@ -1 +1 @@
-{"version":3,"file":"parse-reconcile-expect.js","sourceRoot":"","sources":["../src/parse-reconcile-expect.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOxC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,sEAAsE;YACtE,4CAA4C;YAC5C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAC3D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAI,KAAwC,EAAE,IAAI,CAAC;YAC7D,MAAM,OAAO,GAAI,KAAwC,EAAE,OAAO,CAAC;YACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,0CAA0C,CACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,yEAAyE,GAAG,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"parse-reconcile-expect.js","sourceRoot":"","sources":["../src/parse-reconcile-expect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOxC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,sEAAsE;YACtE,4CAA4C;YAC5C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAC3D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAI,KAAwC,EAAE,IAAI,CAAC;YAC7D,MAAM,OAAO,GAAI,KAAwC,EAAE,OAAO,CAAC;YACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,0CAA0C,CACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,yEAAyE,GAAG,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/plan-skew.d.ts

@@ -1,12 +1,8 @@
 /**
- * Dependency-skew detection over a plan's per-package verdicts. A skew is
- * the dangerous shape from the motivating incident (#403): a package
- * would PUBLISH while a `depends_on` dependency it relies on SKIPs (is
- * already published / stuck), so the dependent ships ahead of its
- * dependency. Pure over {verdicts, packages} — the registry reads happen
- * in `computePlanStatus`.
- *
- * Issue #412, #403 slice 4.
+ * Dependency-skew detection over a plan's per-package verdicts (#412, #403):
+ * a package would PUBLISH while a `depends_on` dependency SKIPs (already
+ * published / stuck), so the dependent ships ahead of its dependency. Pure
+ * over {verdicts, packages} — the registry reads happen in `computePlanStatus`.
  */
 import type { Package } from './config.js';
 import type { PlanVerdict, SkewWarning } from './plan-status-types.js';

package/dist/plan-skew.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan-skew.d.ts","sourceRoot":"","sources":["../src/plan-skew.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEvE,wBAAgB,WAAW,CACzB,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,WAAW,EAAE,CAcf"}
+{"version":3,"file":"plan-skew.d.ts","sourceRoot":"","sources":["../src/plan-skew.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEvE,wBAAgB,WAAW,CACzB,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,WAAW,EAAE,CAcf"}

package/dist/plan-skew.js

@@ -1,12 +1,8 @@
 /**
- * Dependency-skew detection over a plan's per-package verdicts. A skew is
- * the dangerous shape from the motivating incident (#403): a package
- * would PUBLISH while a `depends_on` dependency it relies on SKIPs (is
- * already published / stuck), so the dependent ships ahead of its
- * dependency. Pure over {verdicts, packages} — the registry reads happen
- * in `computePlanStatus`.
- *
- * Issue #412, #403 slice 4.
+ * Dependency-skew detection over a plan's per-package verdicts (#412, #403):
+ * a package would PUBLISH while a `depends_on` dependency SKIPs (already
+ * published / stuck), so the dependent ships ahead of its dependency. Pure
+ * over {verdicts, packages} — the registry reads happen in `computePlanStatus`.
  */
 export function computeSkew(verdicts, byName) {
     const verdictByName = new Map(verdicts.map((v) => [v.package, v.verdict]));

package/dist/plan-skew.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan-skew.js","sourceRoot":"","sources":["../src/plan-skew.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,MAAM,UAAU,WAAW,CACzB,QAAgC,EAChC,MAAoC;IAEpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,qEAAqE;QACrE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;gBACtC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"plan-skew.js","sourceRoot":"","sources":["../src/plan-skew.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,UAAU,WAAW,CACzB,QAAgC,EAChC,MAAoC;IAEpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,qEAAqE;QACrE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;gBACtC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/plan-status-types.d.ts

@@ -1,10 +1,7 @@
 /**
- * `plan` publish/skip + skew shared types. The verdict view layered over
- * the build matrix: per package, would a release from this ref PUBLISH,
- * SKIP (already on the registry), or is the registry UNKNOWN (unreachable
- * — reported, never fatal); plus the dependency-skew pairs.
- *
- * Issue #412, #403 slice 4.
+ * `plan` publish/skip + skew shared types (#412, #403 slice 4): per package,
+ * would a release from this ref PUBLISH, SKIP (already on the registry), or is
+ * the registry UNKNOWN (unreachable — reported, never fatal); plus skew pairs.
  */
 import type { MatrixRow } from './plan.js';
 import type { Kind } from './types.js';

package/dist/plan-status-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan-status-types.d.ts","sourceRoot":"","sources":["../src/plan-status-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC;IACX,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,WAAW,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC"}
+{"version":3,"file":"plan-status-types.d.ts","sourceRoot":"","sources":["../src/plan-status-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC;IACX,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,WAAW,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC"}

package/dist/plan-status-types.js

@@ -1,10 +1,7 @@
 /**
- * `plan` publish/skip + skew shared types. The verdict view layered over
- * the build matrix: per package, would a release from this ref PUBLISH,
- * SKIP (already on the registry), or is the registry UNKNOWN (unreachable
- * — reported, never fatal); plus the dependency-skew pairs.
- *
- * Issue #412, #403 slice 4.
+ * `plan` publish/skip + skew shared types (#412, #403 slice 4): per package,
+ * would a release from this ref PUBLISH, SKIP (already on the registry), or is
+ * the registry UNKNOWN (unreachable — reported, never fatal); plus skew pairs.
  */
 export {};
 //# sourceMappingURL=plan-status-types.js.map

package/dist/plan-status-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan-status-types.js","sourceRoot":"","sources":["../src/plan-status-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}
+{"version":3,"file":"plan-status-types.js","sourceRoot":"","sources":["../src/plan-status-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/plan-status.d.ts

@@ -1,22 +1,9 @@
 /**
- * `putitoutthere plan` publish/skip + skew view (#412, #403 slice 4).
- *
- * Layers a per-package verdict over the build matrix: for each planned
- * package, would a release from this ref PUBLISH (version not yet on the
- * registry), SKIP (already published), or is the registry UNKNOWN
- * (unreachable). Plus dependency skew — a dependent that would PUBLISH
- * while a `depends_on` dependency SKIPs.
- *
- * Thin reader, no parallel logic (design-commitments #7): the real
- * planner (`plan` — cascade + version) gives the matrix, and the same
- * `handler.isPublished` the publish path dispatches through gives the
- * verdict. So the preview can't disagree with what a release would do.
- * The read degrades, never aborts: an unreachable registry yields
- * `unknown` and the matrix is still returned — same posture as `status`.
- *
- * The `matrix` field is byte-identical to bare `plan` output, so the
- * reusable workflow's matrix contract is unchanged; verdicts are
- * additive.
+ * `putitoutthere plan` publish/skip + skew view (#412, #403 slice 4). Layers a
+ * per-package verdict over the build matrix — PUBLISH / SKIP / UNKNOWN — via
+ * the same `handler.isPublished` the publish path uses, so the preview cannot
+ * disagree with what a release would do. `matrix` stays byte-identical to bare
+ * `plan`, and an unreachable registry degrades to `unknown` rather than abort.
  */
 import type { PlanStatus, PlanStatusOptions } from './plan-status-types.js';
 export declare function computePlanStatus(opts: PlanStatusOptions): Promise<PlanStatus>;

package/dist/plan-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan-status.d.ts","sourceRoot":"","sources":["../src/plan-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAwB,MAAM,wBAAwB,CAAC;AAElG,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsCpF"}
+{"version":3,"file":"plan-status.d.ts","sourceRoot":"","sources":["../src/plan-status.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAwB,MAAM,wBAAwB,CAAC;AAElG,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsCpF"}

package/dist/plan-status.js

@@ -1,22 +1,9 @@
 /**
- * `putitoutthere plan` publish/skip + skew view (#412, #403 slice 4).
- *
- * Layers a per-package verdict over the build matrix: for each planned
- * package, would a release from this ref PUBLISH (version not yet on the
- * registry), SKIP (already published), or is the registry UNKNOWN
- * (unreachable). Plus dependency skew — a dependent that would PUBLISH
- * while a `depends_on` dependency SKIPs.
- *
- * Thin reader, no parallel logic (design-commitments #7): the real
- * planner (`plan` — cascade + version) gives the matrix, and the same
- * `handler.isPublished` the publish path dispatches through gives the
- * verdict. So the preview can't disagree with what a release would do.
- * The read degrades, never aborts: an unreachable registry yields
- * `unknown` and the matrix is still returned — same posture as `status`.
- *
- * The `matrix` field is byte-identical to bare `plan` output, so the
- * reusable workflow's matrix contract is unchanged; verdicts are
- * additive.
+ * `putitoutthere plan` publish/skip + skew view (#412, #403 slice 4). Layers a
+ * per-package verdict over the build matrix — PUBLISH / SKIP / UNKNOWN — via
+ * the same `handler.isPublished` the publish path uses, so the preview cannot
+ * disagree with what a release would do. `matrix` stays byte-identical to bare
+ * `plan`, and an unreachable registry degrades to `unknown` rather than abort.
  */
 import { join } from 'node:path';
 import { loadConfig } from './config.js';