pyfig 0.1.0 → 0.3.0

package/dist/runners.js

@@ -0,0 +1,151 @@
+import { spawn, spawnSync, } from 'node:child_process';
+import fs from 'node:fs';
+import { configurationFingerprint, resolveOptions, uvEnvironment, } from './config.js';
+import { assertMutationUsesUv, assertSafePackageArguments, isUvPipCommand, packageManagerEnvironment, uvPipEnvironment, } from './package-target.js';
+import { ensureEnvironment, ensureUv, ensureVirtualEnvironment, } from './provision.js';
+import { runtimeFile } from './runtime-files.js';
+import { memoizeSync } from './state.js';
+import { activateVirtualEnvironment } from './virtual-environment.js';
+export async function pythonSpawn(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const python = await ensureVirtualEnvironment(options);
+    const command = buildPythonCommand(python, args, resolveOptions(options).env);
+    return spawn(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export function pythonSpawnSync(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const python = resolveSynchronously('venv', options);
+    const command = buildPythonCommand(python, args, resolveOptions(options).env);
+    return spawnSync(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export async function pipSpawn(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const environment = await ensureEnvironment(options);
+    const command = buildPipCommand(environment.packageManager, args, resolveOptions(options).env);
+    return spawn(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export function pipSpawnSync(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const environment = resolveSynchronously('environment', options);
+    const command = buildPipCommand(environment.packageManager, args, resolveOptions(options).env);
+    return spawnSync(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export async function uvSpawn(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const resolved = resolveOptions(options);
+    const uv = await ensureUv(resolved);
+    const python = isUvPipCommand(args)
+        ? await ensureVirtualEnvironment(resolved)
+        : undefined;
+    const command = buildUvCommand(uv, args, resolved, python);
+    return spawn(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export function uvSpawnSync(args = [], spawnOptions = {}, pyfigOptions = {}) {
+    const options = optionsForInvocation(pyfigOptions, spawnOptions.env);
+    const resolved = resolveOptions(options);
+    const resolution = isUvPipCommand(args)
+        ? resolveSynchronously('uv-pip', resolved)
+        : { uv: resolveSynchronously('uv', resolved), python: undefined };
+    const command = buildUvCommand(resolution.uv, args, resolved, resolution.python);
+    return spawnSync(command.executable, command.args, {
+        ...spawnOptions,
+        env: command.env,
+    });
+}
+export function buildPythonCommand(python, args, env) {
+    const commandEnv = python.virtualEnvironment
+        ? activateVirtualEnvironment(env, python.virtualEnvironment, python.executable)
+        : env;
+    return {
+        executable: python.executable,
+        args: [...args],
+        env: commandEnv,
+    };
+}
+export function buildPipCommand(packageManager, args, env) {
+    if (!packageManager.virtualEnvironment) {
+        throw new Error('pip commands require an active virtual environment.');
+    }
+    assertSafePackageArguments(args);
+    assertMutationUsesUv(packageManager, args);
+    return {
+        executable: packageManager.executable,
+        args: [...packageManager.prefixArgs, ...args],
+        env: packageManagerEnvironment(env, packageManager),
+    };
+}
+export function buildUvCommand(uv, args, options, python) {
+    const isPip = isUvPipCommand(args);
+    if (isPip && !python?.virtualEnvironment) {
+        throw new Error('uv pip commands require the repo virtual-environment Python interpreter.');
+    }
+    if (isPip)
+        assertSafePackageArguments(args);
+    const env = isPip && python
+        ? uvPipEnvironment(uvEnvironment(options), python)
+        : uvEnvironment(options);
+    return {
+        executable: uv.executable,
+        args: [...args],
+        env,
+    };
+}
+function optionsForInvocation(pyfigOptions, spawnEnv) {
+    return spawnEnv === undefined ? pyfigOptions : { ...pyfigOptions, env: spawnEnv };
+}
+function resolveSynchronously(target, options) {
+    const resolved = resolveOptions(options);
+    const cacheKey = `${target}:${configurationFingerprint(resolved)}`;
+    return memoizeSync('sync-resolution', cacheKey, resolved.cacheTtlMs, synchronousResolutionIsPresent, () => {
+        const request = { target, options: resolved };
+        const result = spawnSync(process.execPath, [runtimeFile('sync-resolver')], {
+            input: JSON.stringify(request),
+            encoding: 'utf8',
+            env: resolved.env,
+            timeout: synchronousResolutionTimeout(resolved),
+            maxBuffer: 4 * 1024 * 1024,
+            windowsHide: true,
+        });
+        if (result.status !== 0 || result.error) {
+            const detail = result.stderr.trim() || result.error?.message || `exit ${result.status}`;
+            throw new Error(`Could not resolve ${target} synchronously: ${detail}`);
+        }
+        try {
+            return JSON.parse(result.stdout);
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            throw new Error(`Could not parse synchronous ${target} resolution: ${detail}`);
+        }
+    });
+}
+function synchronousResolutionTimeout(options) {
+    return options.coordinationTimeoutMs + options.downloadTimeoutMs +
+        (2 * options.installTimeoutMs) + (4 * options.probeTimeoutMs) + 60_000;
+}
+function synchronousResolutionIsPresent(resolution) {
+    if ('packageManager' in resolution) {
+        return fs.existsSync(resolution.python.executable) &&
+            fs.existsSync(resolution.packageManager.executable);
+    }
+    if ('uv' in resolution) {
+        return fs.existsSync(resolution.uv.executable) && fs.existsSync(resolution.python.executable);
+    }
+    return fs.existsSync(resolution.executable);
+}
+//# sourceMappingURL=runners.js.map

package/dist/runners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.js","sourceRoot":"","sources":["../src/runners.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,SAAS,GAIV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,aAAa,GAGd,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,wBAAwB,GAEzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAkBtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAiB,EAAE,EAC/B,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAqB,EAAE,EACnC,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QACjD,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAiB,EAAE,EAC/B,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,eAAe,CAC7B,WAAW,CAAC,cAAc,EAC1B,IAAI,EACJ,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAC5B,CAAC;IACF,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAqB,EAAE,EACnC,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,CAC7B,WAAW,CAAC,cAAc,EAC1B,IAAI,EACJ,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAC5B,CAAC;IACF,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QACjD,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAiB,EAAE,EAC/B,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,MAAM,wBAAwB,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAI,GAAsB,EAAE,EAC5B,YAAY,GAAqB,EAAE,EACnC,YAAY,GAAiB,EAAE;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1C,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;QACjD,GAAG,YAAY;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAkB,EAClB,IAAuB,EACvB,GAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB;QAC1C,CAAC,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/E,CAAC,CAAC,GAAG,CAAC;IACR,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,GAAG,EAAE,UAAU;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,cAAkC,EAClC,IAAuB,EACvB,GAAsB;IAEtB,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjC,oBAAoB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO;QACL,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,IAAI,EAAE,CAAC,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;QAC7C,GAAG,EAAE,yBAAyB,CAAC,GAAG,EAAE,cAAc,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,IAAuB,EACvB,OAA6B,EAC7B,MAAmB;IAEnB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK;QAAE,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM;QACzB,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAClD,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO;QACL,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,YAA0B,EAC1B,QAAuC;IAEvC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACpF,CAAC;AAsBD,SAAS,oBAAoB,CAC3B,MAAuC,EACvC,OAAqB;IAErB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnE,OAAO,WAAW,CAChB,iBAAiB,EACjB,QAAQ,EACR,QAAQ,CAAC,UAAU,EACnB,8BAA8B,EAC9B,GAAG,EAAE;QACH,MAAM,OAAO,GAA0B,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,EAAE;YACzE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC9B,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,OAAO,EAAE,4BAA4B,CAAC,QAAQ,CAAC;YAC/C,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;YAC1B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA8D,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,gBAAgB,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,OAA6B;IACjE,OAAO,OAAO,CAAC,qBAAqB,GAAG,OAAO,CAAC,iBAAiB;QAC9D,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;AAC3E,CAAC;AAED,SAAS,8BAA8B,CACrC,UAAqE;IAErE,IAAI,gBAAgB,IAAI,UAAU,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;YAChD,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC"}

package/dist/runtime-files.d.ts

@@ -0,0 +1,3 @@
+/** Resolve a compiled runtime helper beside either the ESM files or the CJS bundle. */
+export declare function runtimeFile(name: string): string;
+//# sourceMappingURL=runtime-files.d.ts.map

package/dist/runtime-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-files.d.ts","sourceRoot":"","sources":["../src/runtime-files.ts"],"names":[],"mappings":"AAMA,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMhD"}

package/dist/runtime-files.js

@@ -0,0 +1,12 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/** Resolve a compiled runtime helper beside either the ESM files or the CJS bundle. */
+export function runtimeFile(name) {
+    const moduleDirectory = typeof PYFIG_CJS_DIRECTORY === 'string'
+        ? PYFIG_CJS_DIRECTORY
+        : path.dirname(fileURLToPath(import.meta.url));
+    const compiled = path.join(moduleDirectory, `${name}.js`);
+    return fs.existsSync(compiled) ? compiled : path.join(moduleDirectory, `${name}.ts`);
+}
+//# sourceMappingURL=runtime-files.js.map

package/dist/runtime-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-files.js","sourceRoot":"","sources":["../src/runtime-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,eAAe,GAAG,OAAO,mBAAmB,KAAK,QAAQ;QAC7D,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IAC1D,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;AACvF,CAAC"}

package/dist/state.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Share expensive resolution work within one JavaScript realm without treating
+ * cached filesystem state as permanent truth.
+ */
+export declare function memoizeAsync<T>(namespace: string, key: string, ttlMs: number, validate: (value: T) => boolean | Promise<boolean>, load: () => Promise<T>): Promise<T>;
+/** Synchronous counterpart used by spawnSync bridges in the caller realm. */
+export declare function memoizeSync<T>(namespace: string, key: string, ttlMs: number, validate: (value: T) => boolean, load: () => T): T;
+/** Clear completed and in-flight lookup references after external toolchain changes. */
+export declare function clearPyfigCaches(): void;
+//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAClD,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CA0BZ;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,EAC/B,IAAI,EAAE,MAAM,CAAC,GACZ,CAAC,CAcH;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,IAAI,IAAI,CAIvC"}

package/dist/state.js

@@ -0,0 +1,62 @@
+const completed = new Map();
+const inFlight = new Map();
+let cacheGeneration = 0;
+/**
+ * Share expensive resolution work within one JavaScript realm without treating
+ * cached filesystem state as permanent truth.
+ */
+export async function memoizeAsync(namespace, key, ttlMs, validate, load) {
+    const cacheKey = `${namespace}\0${key}`;
+    const cached = completed.get(cacheKey);
+    if (cached && cached.expiresAt >= Date.now()) {
+        try {
+            if (await validate(cached.value))
+                return cached.value;
+        }
+        catch {
+            // Invalid or inaccessible external state is refreshed below.
+        }
+        completed.delete(cacheKey);
+    }
+    const pending = inFlight.get(cacheKey);
+    if (pending)
+        return pending;
+    const generation = cacheGeneration;
+    const loading = load().then((value) => {
+        if (ttlMs > 0 && generation === cacheGeneration) {
+            completed.set(cacheKey, { expiresAt: Date.now() + ttlMs, value });
+        }
+        return value;
+    }).finally(() => {
+        if (inFlight.get(cacheKey) === loading)
+            inFlight.delete(cacheKey);
+    });
+    inFlight.set(cacheKey, loading);
+    return loading;
+}
+/** Synchronous counterpart used by spawnSync bridges in the caller realm. */
+export function memoizeSync(namespace, key, ttlMs, validate, load) {
+    const cacheKey = `${namespace}\0${key}`;
+    const cached = completed.get(cacheKey);
+    if (cached && cached.expiresAt >= Date.now()) {
+        try {
+            if (validate(cached.value))
+                return cached.value;
+        }
+        catch {
+            // Refresh invalid external state below.
+        }
+        completed.delete(cacheKey);
+    }
+    const value = load();
+    if (ttlMs > 0)
+        completed.set(cacheKey, { expiresAt: Date.now() + ttlMs, value });
+    return value;
+}
+/** Clear completed and in-flight lookup references after external toolchain changes. */
+export function clearPyfigCaches() {
+    cacheGeneration += 1;
+    completed.clear();
+    inFlight.clear();
+}
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAKA,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;AAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;AACrD,IAAI,eAAe,GAAG,CAAC,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,GAAW,EACX,KAAa,EACb,QAAkD,EAClD,IAAsB;IAEtB,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,GAAG,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAU,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAU,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,OAAqB,CAAC;IAE1C,MAAM,UAAU,GAAG,eAAe,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,KAAK,GAAG,CAAC,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAChD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CACzB,SAAiB,EACjB,GAAW,EACX,KAAa,EACb,QAA+B,EAC/B,IAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,GAAG,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAU,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAU,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;IACrB,IAAI,KAAK,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB;IAC9B,eAAe,IAAI,CAAC,CAAC;IACrB,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/sync-resolver.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sync-resolver.d.ts.map

package/dist/sync-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-resolver.d.ts","sourceRoot":"","sources":["../src/sync-resolver.ts"],"names":[],"mappings":""}

package/dist/sync-resolver.js

@@ -0,0 +1,24 @@
+import { readFileSync } from 'node:fs';
+import { ensureEnvironment, ensurePython, ensureUv, ensureVirtualEnvironment, } from './provision.js';
+async function main() {
+    const request = JSON.parse(readFileSync(0, 'utf8'));
+    const result = request.target === 'python'
+        ? await ensurePython(request.options)
+        : request.target === 'venv'
+            ? await ensureVirtualEnvironment(request.options)
+            : request.target === 'uv'
+                ? await ensureUv(request.options)
+                : request.target === 'uv-pip'
+                    ? {
+                        uv: await ensureUv(request.options),
+                        python: await ensureVirtualEnvironment(request.options),
+                    }
+                    : await ensureEnvironment(request.options);
+    process.stdout.write(JSON.stringify(result));
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(message);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=sync-resolver.js.map

package/dist/sync-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-resolver.js","sourceRoot":"","sources":["../src/sync-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAOxB,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA0B,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ;QACxC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;gBACvB,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBACjC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;oBAC3B,CAAC,CAAC;wBACE,EAAE,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;wBACnC,MAAM,EAAE,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;qBACxD;oBACH,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/virtual-environment.d.ts

@@ -0,0 +1,9 @@
+export declare const VIRTUAL_ENV_DIRECTORY_NAME = ".venv";
+export declare function virtualEnvironmentDirectory(projectRoot: string): string;
+export declare function virtualEnvironmentPythonExecutable(virtualEnvironment: string): string;
+/** Apply the environment changes that shell activation scripts make for child processes. */
+export declare function activateVirtualEnvironment(env: NodeJS.ProcessEnv, virtualEnvironment: string, pythonExecutable: string): NodeJS.ProcessEnv;
+export declare function pathsEqual(left: string, right: string): boolean;
+/** Canonicalize existing paths so symlink, junction, and filesystem casing aliases compare equally. */
+export declare function canonicalPath(value: string): string;
+//# sourceMappingURL=virtual-environment.d.ts.map

package/dist/virtual-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"virtual-environment.d.ts","sourceRoot":"","sources":["../src/virtual-environment.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,0BAA0B,UAAU,CAAC;AAElD,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,kCAAkC,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAMrF;AAED,4FAA4F;AAC5F,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,kBAAkB,EAAE,MAAM,EAC1B,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAAC,UAAU,CAenB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASnD"}

package/dist/virtual-environment.js

@@ -0,0 +1,42 @@
+import fs from 'node:fs';
+import path from 'node:path';
+export const VIRTUAL_ENV_DIRECTORY_NAME = '.venv';
+export function virtualEnvironmentDirectory(projectRoot) {
+    return path.join(projectRoot, VIRTUAL_ENV_DIRECTORY_NAME);
+}
+export function virtualEnvironmentPythonExecutable(virtualEnvironment) {
+    return path.join(virtualEnvironment, process.platform === 'win32' ? 'Scripts' : 'bin', process.platform === 'win32' ? 'python.exe' : 'python');
+}
+/** Apply the environment changes that shell activation scripts make for child processes. */
+export function activateVirtualEnvironment(env, virtualEnvironment, pythonExecutable) {
+    const activated = { ...env };
+    const pathEntry = Object.keys(activated).find((key) => key.toUpperCase() === 'PATH');
+    const existingPath = pathEntry ? activated[pathEntry] : undefined;
+    for (const key of Object.keys(activated)) {
+        const normalized = key.toUpperCase();
+        if (normalized === 'PATH' || normalized === 'PYTHONHOME' || normalized === 'VIRTUAL_ENV') {
+            delete activated[key];
+        }
+    }
+    activated['PATH'] = [path.dirname(pythonExecutable), existingPath]
+        .filter((value) => Boolean(value))
+        .join(path.delimiter);
+    activated['VIRTUAL_ENV'] = virtualEnvironment;
+    return activated;
+}
+export function pathsEqual(left, right) {
+    return canonicalPath(left) === canonicalPath(right);
+}
+/** Canonicalize existing paths so symlink, junction, and filesystem casing aliases compare equally. */
+export function canonicalPath(value) {
+    const resolved = path.resolve(value);
+    let canonical = resolved;
+    try {
+        canonical = fs.realpathSync.native(resolved);
+    }
+    catch {
+        // Paths being provisioned do not exist yet; the absolute spelling is the best stable key.
+    }
+    return process.platform === 'win32' ? canonical.toLowerCase() : canonical;
+}
+//# sourceMappingURL=virtual-environment.js.map

package/dist/virtual-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"virtual-environment.js","sourceRoot":"","sources":["../src/virtual-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAElD,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,kBAA0B;IAC3E,OAAO,IAAI,CAAC,IAAI,CACd,kBAAkB,EAClB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAChD,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CACvD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,0BAA0B,CACxC,GAAsB,EACtB,kBAA0B,EAC1B,gBAAwB;IAExB,MAAM,SAAS,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;YACzF,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;SAC/D,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,SAAS,CAAC,aAAa,CAAC,GAAG,kBAAkB,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa;IACpD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;IAC5F,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC"}

package/package.json

@@ -1,14 +1,15 @@
 {
   "name": "pyfig",
-  "version": "0.1.0",
-  "description": "Find compatible Python and pip executables, with a locked uv fallback.",
+  "version": "0.3.0",
+  "description": "Provision a repo-local Python venv with uv-first tooling and locked fallbacks.",
   "type": "module",
-  "main": "./dist/index.js",
+  "main": "./dist/cjs/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.js",
+      "require": "./dist/cjs/index.js"
     }
   },
   "bin": {
@@ -21,10 +22,13 @@
     "SECURITY.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && bun run scripts/build-cjs.ts",
     "test": "bun test",
+    "test:zero-python": "bun run scripts/smoke-zero-python.ts",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "verify": "bun run typecheck && bun test",
+    "release:check": "bun run scripts/check-release.ts",
+    "release:audit": "bun run scripts/audit-package.ts",
     "prepack": "bun run verify && bun run build"
   },
   "keywords": [
@@ -37,19 +41,34 @@
   ],
   "author": "Reggie Bowser",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/regbo/pyfig.git"
+  },
+  "bugs": {
+    "url": "https://github.com/regbo/pyfig/issues"
+  },
+  "homepage": "https://github.com/regbo/pyfig#readme",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org"
   },
+  "packageManager": "bun@1.4.4",
   "sideEffects": false,
   "engines": {
-    "node": ">=20.17.0",
+    "node": ">=22.0.0 <=26.x",
     "bun": ">=1.2.0"
   },
   "dependencies": {
     "commander": "^14.0.3",
     "env-paths": "^4.0.0",
+    "extract-zip": "^2.0.1",
+    "pacwich": "^0.7.3",
     "proper-lockfile": "^4.1.2",
     "semver": "^7.8.5",
+    "tar": "^7.4.3",
+    "undici": "^7.30.1",
     "which": "^6.0.1"
   },
   "devDependencies": {