runmat 0.6.1-dev.1 → 0.6.2-dev.0

package/dist/package-cache/registry.js

@@ -0,0 +1,229 @@
+import { decryptRegistryPrivateArtifact } from "./private-artifact.js";
+const METADATA_LIMIT_BYTES = 4 * 1024 * 1024;
+const DEFAULT_ARTIFACT_LIMIT_BYTES = 512 * 1024 * 1024;
+export async function fetchRegistryCandidates(plan, options = {}) {
+    if (!plan.allow_network) {
+        throw new Error("registry candidate network access is disabled");
+    }
+    const index = normalizeIndex(plan.index);
+    const { namespace, name } = parsePackage(plan.package);
+    return fetchJson(endpoint(index, [
+        "v1",
+        "packages",
+        "registry",
+        namespace,
+        name,
+        "candidates"
+    ]), index, options);
+}
+export async function fetchRegistryRelease(plan, options = {}) {
+    if (!plan.allow_network) {
+        throw new Error("registry release network access is disabled");
+    }
+    const index = normalizeIndex(plan.index);
+    const releaseUrl = plan.expected
+        ? endpoint(index, [
+            "v1",
+            "packages",
+            "registry",
+            "releases",
+            plan.expected.release
+        ])
+        : (() => {
+            const { namespace, name } = parsePackage(plan.package);
+            const url = endpoint(index, [
+                "v1",
+                "packages",
+                "registry",
+                namespace,
+                name,
+                "resolve"
+            ]);
+            url.searchParams.set("requirement", plan.requirement);
+            return url;
+        })();
+    const release = await fetchJson(releaseUrl, index, options);
+    const artifact = releaseArtifact(release);
+    const limit = options.maxArtifactBytes ?? DEFAULT_ARTIFACT_LIMIT_BYTES;
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+        throw new Error("registry artifact byte limit must be a positive safe integer");
+    }
+    if (!Number.isSafeInteger(artifact.byteLen) || artifact.byteLen < 0) {
+        throw new Error("registry release contains an invalid artifact length");
+    }
+    if (artifact.byteLen > limit) {
+        throw new Error(`registry artifact exceeds the ${limit}-byte browser limit`);
+    }
+    const artifactUrl = sameOriginArtifactUrl(index, artifact.downloadUrl);
+    const response = await request(artifactUrl, index, options);
+    if (!response.ok) {
+        throw new Error(`registry artifact request failed with HTTP ${response.status}`);
+    }
+    const bytes = await readBounded(response, limit, artifact.byteLen);
+    if (releaseEncryption(release)) {
+        if (!options.privatePackageKeys) {
+            bytes.fill(0);
+            throw new Error("private registry package key access is not configured");
+        }
+        try {
+            const plaintext = await decryptRegistryPrivateArtifact(release, bytes, options.privatePackageKeys);
+            return { release, artifactBytes: plaintext, privateArtifact: true };
+        }
+        finally {
+            bytes.fill(0);
+        }
+    }
+    return { release, artifactBytes: bytes };
+}
+function releaseEncryption(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    return value.encryption ?? null;
+}
+async function fetchJson(url, index, options) {
+    const response = await request(url, index, options);
+    if (!response.ok) {
+        throw new Error(`registry metadata request failed with HTTP ${response.status}`);
+    }
+    const bytes = await readBounded(response, METADATA_LIMIT_BYTES);
+    let value;
+    try {
+        value = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        throw new Error("registry returned invalid JSON metadata");
+    }
+    if (!value || typeof value !== "object") {
+        throw new Error("registry returned an invalid metadata payload");
+    }
+    return value;
+}
+async function request(url, index, options) {
+    const fetcher = options.fetch ?? globalThis.fetch;
+    if (typeof fetcher !== "function") {
+        throw new Error("fetch API is unavailable for registry requests");
+    }
+    const trusted = options.authenticatedOrigin
+        ? normalizeIndex(options.authenticatedOrigin)
+        : null;
+    const token = trusted?.origin === index.origin
+        ? typeof options.authToken === "function"
+            ? await options.authToken()
+            : options.authToken
+        : null;
+    const headers = {};
+    if (token)
+        headers.authorization = `Bearer ${token}`;
+    return fetcher(url, {
+        method: "GET",
+        headers,
+        cache: "no-store",
+        credentials: "omit",
+        redirect: "manual",
+        signal: options.signal
+    });
+}
+async function readBounded(response, limit, expectedLength) {
+    const declared = response.headers.get("content-length");
+    if (declared !== null) {
+        const length = Number(declared);
+        if (!Number.isSafeInteger(length) || length < 0 || length > limit) {
+            throw new Error(`registry response exceeds the ${limit}-byte transfer limit`);
+        }
+        if (expectedLength !== undefined && length !== expectedLength) {
+            throw new Error("registry artifact length differs from signed metadata");
+        }
+    }
+    if (!response.body) {
+        const bytes = new Uint8Array(await response.arrayBuffer());
+        validateLength(bytes.byteLength, limit, expectedLength);
+        return bytes;
+    }
+    const reader = response.body.getReader();
+    const chunks = [];
+    let length = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            length += value.byteLength;
+            validateLength(length, limit);
+            chunks.push(value);
+        }
+    }
+    catch (error) {
+        await reader.cancel().catch(() => { });
+        throw error;
+    }
+    validateLength(length, limit, expectedLength);
+    const bytes = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+function validateLength(length, limit, expectedLength) {
+    if (length > limit) {
+        throw new Error(`registry response exceeds the ${limit}-byte transfer limit`);
+    }
+    if (expectedLength !== undefined && length !== expectedLength) {
+        throw new Error("registry artifact length differs from signed metadata");
+    }
+}
+function normalizeIndex(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:" ||
+        url.username ||
+        url.password ||
+        url.search ||
+        url.hash) {
+        throw new Error("registry index must be a credential-free HTTPS URL");
+    }
+    url.pathname = url.pathname.replace(/\/+$/, "");
+    return url;
+}
+function endpoint(index, segments) {
+    const url = new URL(index);
+    const base = url.pathname.replace(/\/+$/, "");
+    url.pathname = `${base}/${segments.map(encodeURIComponent).join("/")}`;
+    return url;
+}
+function sameOriginArtifactUrl(index, value) {
+    if (!value.startsWith("/") || value.startsWith("//")) {
+        throw new Error("registry returned an unsafe artifact URL");
+    }
+    const url = new URL(value, index);
+    if (url.origin !== index.origin ||
+        url.username ||
+        url.password ||
+        url.hash) {
+        throw new Error("registry returned an unsafe artifact URL");
+    }
+    return url;
+}
+function parsePackage(value) {
+    const colon = value.indexOf(":");
+    const slash = value.indexOf("/", colon + 1);
+    if (colon <= 0 || slash <= colon + 1 || value.indexOf("/", slash + 1) !== -1) {
+        throw new Error("registry plan contains an invalid canonical package ID");
+    }
+    return {
+        namespace: value.slice(colon + 1, slash),
+        name: value.slice(slash + 1)
+    };
+}
+function releaseArtifact(value) {
+    const artifact = value.artifact;
+    if (!artifact || typeof artifact !== "object") {
+        throw new Error("registry release is missing artifact metadata");
+    }
+    const { byteLen, downloadUrl } = artifact;
+    if (typeof byteLen !== "number" || typeof downloadUrl !== "string") {
+        throw new Error("registry release contains invalid artifact metadata");
+    }
+    return { byteLen, downloadUrl };
+}
+//# sourceMappingURL=registry.js.map

package/dist/package-cache/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/package-cache/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAE/B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAgCvD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA2B,EAC3B,UAAkC,EAAE;IAEpC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,SAAS,CACd,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI;QACJ,UAAU;QACV,UAAU;QACV,SAAS;QACT,IAAI;QACJ,YAAY;KACb,CAAC,EACF,KAAK,EACL,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAA6B,EAC7B,UAAkC,EAAE;IAEpC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ;QAC9B,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE;YACd,IAAI;YACJ,UAAU;YACV,UAAU;YACV,UAAU;YACV,IAAI,CAAC,QAAQ,CAAC,OAAO;SACtB,CAAC;QACJ,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE;gBAC1B,IAAI;gBACJ,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,IAAI;gBACJ,SAAS;aACV,CAAC,CAAC;YACH,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,IAAI,4BAA4B,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,qBAAqB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,8BAA8B,CACpD,OAAO,EACP,KAAK,EACL,OAAO,CAAC,kBAAkB,CAC3B,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,OAAQ,KAAkC,CAAC,UAAU,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAQ,EACR,KAAU,EACV,OAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAChE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,GAAQ,EACR,KAAU,EACV,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB;QACzC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,KAAK,GACT,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM;QAC9B,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;YACvC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE;YAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;QACrB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACrD,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,KAAK;QACb,OAAO;QACP,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,QAAkB,EAClB,KAAa,EACb,cAAuB;IAEvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,sBAAsB,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;YAC3B,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,cAAuB;IAC5E,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,sBAAsB,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI,EACR,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAU,EAAE,QAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,QAAQ,GAAG,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAU,EAAE,KAAa;IACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,IACE,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC3B,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,IAAI,EACR,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;IAC5D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAGhC,CAAC;IACF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/dist/package-cache/server-project.d.ts

@@ -0,0 +1,54 @@
+export interface ServerProjectAcquisitionPlan {
+    service: string;
+    project: string;
+    selector: {
+        kind: "exact" | "tag";
+        value: string;
+    };
+    allow_network: boolean;
+    expected?: {
+        service: string;
+        project: string;
+        snapshot: string;
+        tree_digest: string;
+    };
+    lock_action: "preserve" | "write" | "replace";
+}
+export interface ServerProjectTreeInventoryWire {
+    project: string;
+    snapshot: string;
+    treeDigest: string;
+    entries: Array<{
+        path: string;
+        kind: "file" | "directory";
+        bytes?: string;
+        executable?: boolean;
+    }>;
+}
+export interface ServerProjectSnapshotOptions {
+    authenticatedOrigin?: string;
+    authToken?: string | (() => string | null | Promise<string | null>);
+    fetch?: typeof globalThis.fetch;
+    signal?: AbortSignal;
+    etag?: string;
+    range?: {
+        start: number;
+        end?: number;
+    };
+}
+export type ServerProjectSnapshotFetchOutcome = {
+    kind: "snapshot";
+    inventory: ServerProjectTreeInventoryWire;
+    etag?: string;
+} | {
+    kind: "not-modified";
+    etag?: string;
+} | {
+    kind: "partial";
+    bytes: Uint8Array;
+    contentRange: string;
+    etag?: string;
+};
+export declare function fetchServerProjectSnapshot(plan: ServerProjectAcquisitionPlan, options?: ServerProjectSnapshotOptions): Promise<ServerProjectTreeInventoryWire>;
+export declare function fetchServerProjectSnapshotResponse(plan: ServerProjectAcquisitionPlan, options?: ServerProjectSnapshotOptions): Promise<ServerProjectSnapshotFetchOutcome>;
+//# sourceMappingURL=server-project.d.ts.map

package/dist/package-cache/server-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-project.d.ts","sourceRoot":"","sources":["../../src/package-cache/server-project.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,4BAA4B;IAC3C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GACzC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,8BAA8B,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEN,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,4BAA4B,EAClC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,8BAA8B,CAAC,CAQzC;AAED,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,4BAA4B,EAClC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,iCAAiC,CAAC,CA4E5C"}

package/dist/package-cache/server-project.js

@@ -0,0 +1,89 @@
+export async function fetchServerProjectSnapshot(plan, options = {}) {
+    const outcome = await fetchServerProjectSnapshotResponse(plan, options);
+    if (outcome.kind !== "snapshot") {
+        throw new Error(`RunMat Server returned ${outcome.kind} where a complete project snapshot was required`);
+    }
+    return outcome.inventory;
+}
+export async function fetchServerProjectSnapshotResponse(plan, options = {}) {
+    if (!plan.allow_network) {
+        throw new Error("Server project snapshot network access is disabled");
+    }
+    const fetcher = options.fetch ?? globalThis.fetch;
+    if (typeof fetcher !== "function") {
+        throw new Error("fetch API is unavailable for RunMat Server project snapshots");
+    }
+    const origin = normalizeOrigin(plan.service);
+    const authenticatedOrigin = options.authenticatedOrigin
+        ? normalizeOrigin(options.authenticatedOrigin)
+        : null;
+    const token = authenticatedOrigin === origin
+        ? typeof options.authToken === "function"
+            ? await options.authToken()
+            : options.authToken
+        : null;
+    const url = `${origin}/v1/packages/projects/${encodeURIComponent(plan.project)}/snapshots/${encodeURIComponent(plan.selector.value)}`;
+    const headers = {};
+    if (token)
+        headers.authorization = `Bearer ${token}`;
+    if (options.etag)
+        headers["if-none-match"] = options.etag;
+    if (options.range) {
+        if (!Number.isSafeInteger(options.range.start) ||
+            options.range.start < 0 ||
+            (options.range.end !== undefined &&
+                (!Number.isSafeInteger(options.range.end) ||
+                    options.range.end < options.range.start))) {
+            throw new Error("RunMat Server project snapshot byte range is invalid");
+        }
+        headers.range = `bytes=${options.range.start}-${options.range.end ?? ""}`;
+    }
+    const response = await fetcher(url, {
+        method: "GET",
+        headers,
+        cache: "no-store",
+        credentials: "omit",
+        signal: options.signal
+    });
+    const etag = response.headers.get("etag") ?? undefined;
+    if (response.status === 304) {
+        return { kind: "not-modified", etag };
+    }
+    if (response.status === 206) {
+        const contentRange = response.headers.get("content-range");
+        if (!contentRange) {
+            throw new Error("RunMat Server returned a partial snapshot without Content-Range");
+        }
+        return {
+            kind: "partial",
+            bytes: new Uint8Array(await response.arrayBuffer()),
+            contentRange,
+            etag
+        };
+    }
+    if (!response.ok) {
+        const detail = await response.text().catch(() => "");
+        throw new Error(`RunMat Server project snapshot failed with HTTP ${response.status}${detail ? `: ${detail}` : ""}`);
+    }
+    const value = await response.json();
+    if (!value || typeof value !== "object") {
+        throw new Error("RunMat Server returned an invalid project snapshot payload");
+    }
+    return {
+        kind: "snapshot",
+        inventory: value,
+        etag
+    };
+}
+function normalizeOrigin(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:" ||
+        url.username ||
+        url.password ||
+        url.search ||
+        url.hash) {
+        throw new Error("RunMat Server origin must be a credential-free HTTPS URL");
+    }
+    return url.toString().replace(/\/+$/, "");
+}
+//# sourceMappingURL=server-project.js.map

package/dist/package-cache/server-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-project.js","sourceRoot":"","sources":["../../src/package-cache/server-project.ts"],"names":[],"mappings":"AAiDA,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAkC,EAClC,UAAwC,EAAE;IAE1C,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,CAAC,IAAI,iDAAiD,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAkC,EAClC,UAAwC,EAAE;IAE1C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB;QACrD,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,KAAK,GACT,mBAAmB,KAAK,MAAM;QAC5B,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;YACvC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE;YAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;QACrB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,GAAG,GAAG,GAAG,MAAM,yBAAyB,kBAAkB,CAC9D,IAAI,CAAC,OAAO,CACb,cAAc,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;YACvB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS;gBAC9B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;oBACvC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,KAAK,GAAG,SAAS,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,KAAK;QACb,OAAO;QACP,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnD,YAAY;YACZ,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,mDAAmD,QAAQ,CAAC,MAAM,GAChE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,KAAuC;QAClD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI,EACR,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC"}