tegami 1.1.0 → 1.1.2

package/dist/npm-DoPhFKji.js

@@ -0,0 +1,1252 @@
+import { c as somePromise, i as isNodeError, n as execFailure, r as handlePluginError, s as joinPath } from "./error-BhMYq9iW.js";
+import { t as _accessExpressionAsString } from "./_accessExpressionAsString-QhbUZzwv.js";
+import { n as _validateReport, t as _createStandardSchema } from "./_createStandardSchema-BGQyz-uA.js";
+import { a as parseChangelogFile, i as parsePublishLock, n as validateChangelogStore, r as validatePackageStore } from "./draft-CzUiQasJ.js";
+import { t as _assertGuard } from "./_assertGuard-BBn2NbSz.js";
+import { n as WorkspacePackage } from "./graph-BmXTJZxx.js";
+import fs, { readFile, writeFile } from "node:fs/promises";
+import path, { join } from "node:path";
+import { x } from "tinyexec";
+import * as semver$1 from "semver";
+import { parse as parse$1, parseDocument, stringify } from "yaml";
+import { detect } from "package-manager-detector";
+import { tmpdir } from "node:os";
+import { intro, note, outro } from "@clack/prompts";
+import { glob } from "tinyglobby";
+//#region src/plans/publish.ts
+async function initPublishPlan(context, options) {
+	let lock;
+	try {
+		lock = parsePublishLock(await fs.readFile(context.lockPath, "utf8"));
+	} catch {
+		return;
+	}
+	let data;
+	const packages = /* @__PURE__ */ new Map();
+	const changelogs = /* @__PURE__ */ new Map();
+	while (data = lock.read("core:changelogs")) {
+		const validated = validateChangelogStore(data);
+		if (!validated.success) continue;
+		const entry = validated.data;
+		const parsed = parseChangelogFile(entry.filename, entry.content);
+		if (!parsed) continue;
+		changelogs.set(parsed.id, parsed);
+	}
+	while (data = lock.read("core:packages")) {
+		const validated = validatePackageStore(data);
+		if (!validated.success) continue;
+		const parsed = validated.data;
+		if (!context.graph.get(parsed.id)) continue;
+		const pkgChangelogs = [];
+		for (const id of parsed.changelogIds ?? []) {
+			const entry = changelogs.get(id);
+			if (entry) pkgChangelogs.push(entry);
+		}
+		packages.set(parsed.id, {
+			changelogs: pkgChangelogs,
+			updated: parsed.updated
+		});
+	}
+	const plan = {
+		options,
+		changelogs,
+		packages
+	};
+	for (const plugin of context.plugins) await handlePluginError(plugin, "initPublishPlan", () => plugin.initPublishPlan?.call(context, {
+		lock,
+		plan
+	}));
+	return plan;
+}
+function resolvePublishTargets(plan) {
+	const ordered = [];
+	const scanned = /* @__PURE__ */ new Set();
+	function scan(id, stack) {
+		const preflight = plan.packages.get(id)?.preflight;
+		if (!preflight || !preflight.shouldPublish) return;
+		if (stack.has(id)) throw new Error(`circular reference of deps: ${[...stack, id].join(" -> ")}`);
+		if (scanned.has(id)) return;
+		if (preflight.wait) {
+			stack.add(id);
+			for (const dep of preflight.wait) scan(dep, stack);
+			stack.delete(id);
+		}
+		ordered.push(id);
+		scanned.add(id);
+	}
+	const stack = /* @__PURE__ */ new Set();
+	for (const id of plan.packages.keys()) scan(id, stack);
+	return ordered;
+}
+async function runPublishPlan(context, plan) {
+	const { dryRun = false } = plan.options;
+	const onPublishResult = async (pkg, publishResult) => {
+		const packagePlan = plan.packages.get(pkg.id);
+		if (!packagePlan) return;
+		packagePlan.publishResult = publishResult;
+		if (publishResult.type === "skipped") return;
+		for (const plugin of context.plugins) await handlePluginError(plugin, "afterPublish", () => plugin.afterPublish?.call(context, {
+			pkg,
+			plan
+		}));
+	};
+	publishLoop: for (const id of resolvePublishTargets(plan)) {
+		const pkg = context.graph.get(id);
+		if (dryRun) {
+			await onPublishResult(pkg, { type: "published" });
+			continue;
+		}
+		for (const plugin of context.plugins) if (await handlePluginError(plugin, "willPublish", () => plugin.willPublish?.call(context, { pkg })) === false) continue publishLoop;
+		for (const plugin of context.plugins) {
+			const publishResult = await handlePluginError(plugin, "publish", () => plugin.publish?.call(context, {
+				pkg,
+				plan
+			}));
+			if (publishResult) {
+				await onPublishResult(pkg, publishResult);
+				continue publishLoop;
+			}
+		}
+		await onPublishResult(pkg, {
+			type: "failed",
+			error: `There is no plugin to publish package "${pkg.id}", please make sure the package has a supported provider plugin.`
+		});
+	}
+	for (const packagePlan of plan.packages.values()) packagePlan.publishResult ??= { type: "skipped" };
+	for (const plugin of context.plugins) await handlePluginError(plugin, "afterPublishAll", () => plugin.afterPublishAll?.call(context, { plan }));
+}
+async function runPreflights(context, plan) {
+	const promises = [];
+	for (const [id, packagePlan] of plan.packages) {
+		const pkg = context.graph.get(id);
+		packagePlan.preflight = { shouldPublish: false };
+		if (!packagePlan.updated) continue;
+		promises.push((async () => {
+			for (const plugin of context.plugins) {
+				const res = await handlePluginError(plugin, "publishPreflight", () => plugin.publishPreflight?.call(context, {
+					pkg,
+					plan
+				}));
+				if (res) {
+					packagePlan.preflight = res;
+					break;
+				}
+			}
+		})());
+	}
+	await Promise.all(promises);
+	for (const plugin of context.plugins) await handlePluginError(plugin, "afterPreflight", () => plugin.afterPreflight?.call(context, { plan }));
+}
+async function publishPlanStatus(plan, context) {
+	for (const plugin of context.plugins) {
+		const status = await handlePluginError(plugin, "resolvePlanStatus", () => plugin.resolvePlanStatus?.call(context, { plan }));
+		if (Array.isArray(status) && await somePromise(status, (v) => v === "pending")) return "pending";
+		if (status === "pending") return "pending";
+	}
+	return "success";
+}
+//#endregion
+//#region src/providers/npm/cli.ts
+const PLACEHOLDER_VERSION = "0.0.0-tegami-trusted-publish-setup";
+const PLACEHOLDER_DIST_TAG = "temp";
+const PROJECT_FLAG = {
+	gitlab: "--project",
+	github: "--repo"
+};
+function registerNpmCli(cli, options) {
+	cli.command("npm pretrust", { description: "publish empty placeholder packages and configure npm trusted publishing for new packages" }).option("dry-run", {
+		type: "boolean",
+		description: "show packages that would be configured without publishing"
+	}).action(async ({ context, values }) => {
+		intro("npm pretrust");
+		if (!context.graph.getPackages().some((pkg) => pkg instanceof NpmPackage)) throw new Error("No npm packages found in the workspace.");
+		const dryRun = values["dry-run"] ?? false;
+		let repo;
+		if (options.provider === "github") {
+			if (!context.github?.repo) throw new Error("The GitHub plugin must be configured with `repo` specified.");
+			repo = context.github.repo;
+		} else if (options.provider === "gitlab") {
+			if (!context.gitlab?.repo) throw new Error("The GitLab plugin must be configured with `repo` specified.");
+			repo = context.gitlab.repo;
+		} else throw new Error(`Invalid npm trusted publishing provider: ${options.provider}`);
+		const targets = await resolvePretrustTargets(context);
+		if (targets.length === 0) {
+			outro("All publishable packages in the publish lock already exist on npm.");
+			return;
+		}
+		const prepareLines = ["Make sure to run login command first, it will publish empty packages."];
+		for (const pkg of targets) prepareLines.push(`${pkg.name}: will publish a placeholder under dist-tag "${PLACEHOLDER_DIST_TAG}", then configure trusted publishing.`);
+		note(prepareLines.join("\n"), dryRun ? "Dry run" : "Configure trusted publishing");
+		const lines = [];
+		let lock;
+		if (!dryRun) try {
+			lock = parsePublishLock(await fs.readFile(context.lockPath, "utf8"));
+		} catch {}
+		for (const pkg of targets) {
+			if (dryRun) {
+				lines.push(`would configure ${pkg.name} (placeholder ${PLACEHOLDER_VERSION}@${PLACEHOLDER_DIST_TAG})`);
+				continue;
+			}
+			await publishPlaceholder(pkg);
+			await npmTrust(context, pkg, options, repo);
+			lines.push(`configured ${pkg.name} (placeholder ${PLACEHOLDER_VERSION}@${PLACEHOLDER_DIST_TAG})`);
+			lock?.write("npm:mark-latest", { id: pkg.id });
+		}
+		if (lock) await fs.writeFile(context.lockPath, lock.serialize());
+		note(lines.join("\n"), "Result");
+		outro(dryRun ? "Dry run complete. Re-run without --dry-run to publish placeholders and configure trusted publishing." : "Trusted publishing configured. CI can now publish real package versions with OIDC.");
+	});
+}
+async function resolvePretrustTargets(context) {
+	const plan = await initPublishPlan(context, {});
+	if (!plan) throw new Error(`No publish lock found at ${context.lockPath}. Run "tegami version" before configuring trusted publishing.`);
+	await runPreflights(context, plan);
+	return (await Promise.all(Array.from(plan.packages, async ([id, { preflight }]) => {
+		if (!preflight?.shouldPublish) return;
+		const pkg = context.graph.get(id);
+		if (!pkg || !(pkg instanceof NpmPackage)) return;
+		if (await isPackageOnRegistry(pkg.name, pkg.getRegistry())) return;
+		return pkg;
+	}))).filter((pkg) => pkg !== void 0);
+}
+async function isPackageOnRegistry(name, registry = "https://registry.npmjs.org") {
+	const response = await fetch(joinPath(registry, name), { headers: { Accept: "application/json" } });
+	if (response.status === 404) return false;
+	if (!response.ok) throw new Error(`Unable to check whether ${name} exists on the npm registry${registry ? ` "${registry}"` : ""}.`);
+	return true;
+}
+async function publishPlaceholder(pkg) {
+	const registry = pkg.getRegistry();
+	const access = pkg.manifest.publishConfig?.access;
+	const dir = await fs.mkdtemp(join(tmpdir(), "tegami-npm-placeholder-"));
+	try {
+		await fs.writeFile(join(dir, "package.json"), `${JSON.stringify({
+			name: pkg.name,
+			version: PLACEHOLDER_VERSION,
+			description: "Placeholder published by Tegami for npm trusted publishing setup."
+		}, null, 2)}\n`);
+		await fs.writeFile(join(dir, "README.md"), `# Placeholder package
+
+This empty package was published by [Tegami](https://tegami.fuma-nama.dev) to configure npm trusted publishing.
+
+The real package contents will be published via CI with OIDC.
+`);
+		const args = [
+			"publish",
+			"--tag",
+			PLACEHOLDER_DIST_TAG,
+			"--ignore-scripts",
+			"--registry",
+			registry
+		];
+		if (access) args.push("--access", access);
+		const result = await x("npm", args, { nodeOptions: {
+			cwd: dir,
+			stdio: "inherit"
+		} });
+		if (result.exitCode !== 0) {
+			const hint = result.stderr.includes("EOTP") ? " Complete npm 2FA in the terminal, or publish with an OTP-capable session." : "";
+			throw execFailure(`Failed to publish placeholder ${pkg.name}@${PLACEHOLDER_VERSION} with dist-tag "${PLACEHOLDER_DIST_TAG}".${hint}`, result);
+		}
+	} finally {
+		await fs.rm(dir, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+async function npmTrust(context, pkg, options, repo) {
+	const result = await x("npm", [
+		"trust",
+		options.provider,
+		pkg.name,
+		PROJECT_FLAG[options.provider],
+		repo,
+		"--file",
+		options.workflow,
+		"--allow-publish",
+		"-y",
+		"--registry",
+		pkg.getRegistry()
+	], { nodeOptions: {
+		cwd: context.cwd,
+		stdio: "inherit"
+	} });
+	if (result.exitCode !== 0) {
+		const hint = result.stderr.includes("EOTP") ? " Complete npm 2FA in the terminal when prompted." : "";
+		throw execFailure(`Failed to configure trusted publishing for ${pkg.name}.${hint}`, result);
+	}
+}
+//#endregion
+//#region src/providers/npm/graph.ts
+var NpmPackage = class extends WorkspacePackage {
+	path;
+	manifest;
+	manager = "npm";
+	dependencies;
+	constructor(path, manifest) {
+		super();
+		this.path = path;
+		this.manifest = manifest;
+	}
+	get name() {
+		return this.manifest.name;
+	}
+	get version() {
+		return this.manifest.version;
+	}
+	async write() {
+		await writeFile(path.join(this.path, "package.json"), `${JSON.stringify(this.manifest, null, 2)}\n`);
+	}
+	initDraft() {
+		const defaults = super.initDraft();
+		defaults.npm = { distTag: this.manifest.publishConfig?.tag };
+		return defaults;
+	}
+	getRegistry() {
+		return this.manifest.publishConfig?.registry ?? "https://registry.npmjs.org";
+	}
+	configureDraft({ draft }) {
+		super.configureDraft({ draft });
+		const { distTag = this.group?.options?.npm?.distTag } = this.options.npm ?? {};
+		if (distTag) {
+			draft.npm ??= {};
+			draft.npm.distTag = distTag;
+		} else if (draft.prerelease) {
+			draft.npm ??= {};
+			draft.npm.distTag ??= draft.prerelease;
+		}
+	}
+	listDependencies(graph) {
+		return this.dependencies ??= listDependencies(graph, this);
+	}
+};
+const assertPnpmWorkspace = (() => {
+	const _io0 = (input) => (void 0 === input.packages || Array.isArray(input.packages) && input.packages.every((elem) => "string" === typeof elem)) && (void 0 === input.catalog || "object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) && _io1(input.catalog)) && (void 0 === input.catalogs || "object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) && _io2(input.catalogs));
+	const _io1 = (input) => Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "string" === typeof value;
+	});
+	const _io2 = (input) => Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "object" === typeof value && null !== value && false === Array.isArray(value) && _io1(value);
+	});
+	const _ao0 = (input, _path, _exceptionable = true) => (void 0 === input.packages || (Array.isArray(input.packages) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages",
+		expected: "(Array<string> | undefined)",
+		value: input.packages
+	}, _errorFactory)) && input.packages.every((elem, _index2) => "string" === typeof elem || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages[" + _index2 + "]",
+		expected: "string",
+		value: elem
+	}, _errorFactory)) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages",
+		expected: "(Array<string> | undefined)",
+		value: input.packages
+	}, _errorFactory)) && (void 0 === input.catalog || ("object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && _ao1(input.catalog, _path + ".catalog", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && (void 0 === input.catalogs || ("object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory)) && _ao2(input.catalogs, _path + ".catalogs", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory));
+	const _ao1 = (input, _path, _exceptionable = true) => false === _exceptionable || Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "string" === typeof value || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "string",
+			value
+		}, _errorFactory);
+	});
+	const _ao2 = (input, _path, _exceptionable = true) => false === _exceptionable || Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return ("object" === typeof value && null !== value && false === Array.isArray(value) || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "Record<string, string>",
+			value
+		}, _errorFactory)) && _ao1(value, _path + _accessExpressionAsString(key), _exceptionable) || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "Record<string, string>",
+			value
+		}, _errorFactory);
+	});
+	const __is = (input) => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
+	let _errorFactory;
+	return (input, errorFactory) => {
+		if (false === __is(input)) {
+			_errorFactory = errorFactory;
+			((input, _path, _exceptionable = true) => ("object" === typeof input && null !== input && false === Array.isArray(input) || _assertGuard(true, {
+				method: "typia.createAssert",
+				path: _path + "",
+				expected: "PnpmWorkspace",
+				value: input
+			}, _errorFactory)) && _ao0(input, _path + "", true) || _assertGuard(true, {
+				method: "typia.createAssert",
+				path: _path + "",
+				expected: "PnpmWorkspace",
+				value: input
+			}, _errorFactory))(input, "$input", true);
+		}
+		return input;
+	};
+})();
+const assertPackageManifest = (() => {
+	const _io0 = (input) => "string" === typeof input.name && (void 0 === input.version || "string" === typeof input.version) && (void 0 === input["private"] || "boolean" === typeof input["private"]) && (void 0 === input.publishConfig || "object" === typeof input.publishConfig && null !== input.publishConfig && false === Array.isArray(input.publishConfig) && _io1(input.publishConfig)) && (void 0 === input.scripts || "object" === typeof input.scripts && null !== input.scripts && false === Array.isArray(input.scripts) && _io2(input.scripts)) && null !== input.workspaces && (void 0 === input.workspaces || Array.isArray(input.workspaces) && input.workspaces.every((elem) => "string" === typeof elem) || "object" === typeof input.workspaces && null !== input.workspaces && false === Array.isArray(input.workspaces) && _io3(input.workspaces)) && (void 0 === input.catalog || "object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) && _io2(input.catalog)) && (void 0 === input.catalogs || "object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) && _io4(input.catalogs)) && (void 0 === input.dependencies || "object" === typeof input.dependencies && null !== input.dependencies && false === Array.isArray(input.dependencies) && _io2(input.dependencies)) && (void 0 === input.devDependencies || "object" === typeof input.devDependencies && null !== input.devDependencies && false === Array.isArray(input.devDependencies) && _io2(input.devDependencies)) && (void 0 === input.peerDependencies || "object" === typeof input.peerDependencies && null !== input.peerDependencies && false === Array.isArray(input.peerDependencies) && _io2(input.peerDependencies)) && (void 0 === input.optionalDependencies || "object" === typeof input.optionalDependencies && null !== input.optionalDependencies && false === Array.isArray(input.optionalDependencies) && _io2(input.optionalDependencies));
+	const _io1 = (input) => (void 0 === input.access || "public" === input.access || "restricted" === input.access) && (void 0 === input.registry || "string" === typeof input.registry) && (void 0 === input.tag || "string" === typeof input.tag);
+	const _io2 = (input) => Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "string" === typeof value;
+	});
+	const _io3 = (input) => (void 0 === input.packages || Array.isArray(input.packages) && input.packages.every((elem) => "string" === typeof elem)) && (void 0 === input.catalog || "object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) && _io2(input.catalog)) && (void 0 === input.catalogs || "object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) && _io4(input.catalogs));
+	const _io4 = (input) => Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "object" === typeof value && null !== value && false === Array.isArray(value) && _io2(value);
+	});
+	const _ao0 = (input, _path, _exceptionable = true) => ("string" === typeof input.name || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".name",
+		expected: "string",
+		value: input.name
+	}, _errorFactory)) && (void 0 === input.version || "string" === typeof input.version || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".version",
+		expected: "(string | undefined)",
+		value: input.version
+	}, _errorFactory)) && (void 0 === input["private"] || "boolean" === typeof input["private"] || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + "[\"private\"]",
+		expected: "(boolean | undefined)",
+		value: input["private"]
+	}, _errorFactory)) && (void 0 === input.publishConfig || ("object" === typeof input.publishConfig && null !== input.publishConfig && false === Array.isArray(input.publishConfig) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".publishConfig",
+		expected: "(__type | undefined)",
+		value: input.publishConfig
+	}, _errorFactory)) && _ao1(input.publishConfig, _path + ".publishConfig", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".publishConfig",
+		expected: "(__type | undefined)",
+		value: input.publishConfig
+	}, _errorFactory)) && (void 0 === input.scripts || ("object" === typeof input.scripts && null !== input.scripts && false === Array.isArray(input.scripts) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".scripts",
+		expected: "(Record<string, string> | undefined)",
+		value: input.scripts
+	}, _errorFactory)) && _ao2(input.scripts, _path + ".scripts", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".scripts",
+		expected: "(Record<string, string> | undefined)",
+		value: input.scripts
+	}, _errorFactory)) && (null !== input.workspaces || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".workspaces",
+		expected: "(Array<string> | BunWorkspaces | undefined)",
+		value: input.workspaces
+	}, _errorFactory)) && (void 0 === input.workspaces || Array.isArray(input.workspaces) && input.workspaces.every((elem, _index3) => "string" === typeof elem || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".workspaces[" + _index3 + "]",
+		expected: "string",
+		value: elem
+	}, _errorFactory)) || "object" === typeof input.workspaces && null !== input.workspaces && false === Array.isArray(input.workspaces) && _ao3(input.workspaces, _path + ".workspaces", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".workspaces",
+		expected: "(Array<string> | BunWorkspaces | undefined)",
+		value: input.workspaces
+	}, _errorFactory) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".workspaces",
+		expected: "(Array<string> | BunWorkspaces | undefined)",
+		value: input.workspaces
+	}, _errorFactory)) && (void 0 === input.catalog || ("object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && _ao2(input.catalog, _path + ".catalog", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && (void 0 === input.catalogs || ("object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory)) && _ao4(input.catalogs, _path + ".catalogs", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory)) && (void 0 === input.dependencies || ("object" === typeof input.dependencies && null !== input.dependencies && false === Array.isArray(input.dependencies) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".dependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.dependencies
+	}, _errorFactory)) && _ao2(input.dependencies, _path + ".dependencies", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".dependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.dependencies
+	}, _errorFactory)) && (void 0 === input.devDependencies || ("object" === typeof input.devDependencies && null !== input.devDependencies && false === Array.isArray(input.devDependencies) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".devDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.devDependencies
+	}, _errorFactory)) && _ao2(input.devDependencies, _path + ".devDependencies", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".devDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.devDependencies
+	}, _errorFactory)) && (void 0 === input.peerDependencies || ("object" === typeof input.peerDependencies && null !== input.peerDependencies && false === Array.isArray(input.peerDependencies) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".peerDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.peerDependencies
+	}, _errorFactory)) && _ao2(input.peerDependencies, _path + ".peerDependencies", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".peerDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.peerDependencies
+	}, _errorFactory)) && (void 0 === input.optionalDependencies || ("object" === typeof input.optionalDependencies && null !== input.optionalDependencies && false === Array.isArray(input.optionalDependencies) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".optionalDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.optionalDependencies
+	}, _errorFactory)) && _ao2(input.optionalDependencies, _path + ".optionalDependencies", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".optionalDependencies",
+		expected: "(Record<string, string> | undefined)",
+		value: input.optionalDependencies
+	}, _errorFactory));
+	const _ao1 = (input, _path, _exceptionable = true) => (void 0 === input.access || "public" === input.access || "restricted" === input.access || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".access",
+		expected: "(\"public\" | \"restricted\" | undefined)",
+		value: input.access
+	}, _errorFactory)) && (void 0 === input.registry || "string" === typeof input.registry || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".registry",
+		expected: "(string | undefined)",
+		value: input.registry
+	}, _errorFactory)) && (void 0 === input.tag || "string" === typeof input.tag || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".tag",
+		expected: "(string | undefined)",
+		value: input.tag
+	}, _errorFactory));
+	const _ao2 = (input, _path, _exceptionable = true) => false === _exceptionable || Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return "string" === typeof value || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "string",
+			value
+		}, _errorFactory);
+	});
+	const _ao3 = (input, _path, _exceptionable = true) => (void 0 === input.packages || (Array.isArray(input.packages) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages",
+		expected: "(Array<string> | undefined)",
+		value: input.packages
+	}, _errorFactory)) && input.packages.every((elem, _index4) => "string" === typeof elem || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages[" + _index4 + "]",
+		expected: "string",
+		value: elem
+	}, _errorFactory)) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".packages",
+		expected: "(Array<string> | undefined)",
+		value: input.packages
+	}, _errorFactory)) && (void 0 === input.catalog || ("object" === typeof input.catalog && null !== input.catalog && false === Array.isArray(input.catalog) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && _ao2(input.catalog, _path + ".catalog", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalog",
+		expected: "(Record<string, string> | undefined)",
+		value: input.catalog
+	}, _errorFactory)) && (void 0 === input.catalogs || ("object" === typeof input.catalogs && null !== input.catalogs && false === Array.isArray(input.catalogs) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory)) && _ao4(input.catalogs, _path + ".catalogs", _exceptionable) || _assertGuard(_exceptionable, {
+		method: "typia.createAssert",
+		path: _path + ".catalogs",
+		expected: "(Record<string, Record<string, string>> | undefined)",
+		value: input.catalogs
+	}, _errorFactory));
+	const _ao4 = (input, _path, _exceptionable = true) => false === _exceptionable || Object.keys(input).every((key) => {
+		const value = input[key];
+		if (void 0 === value) return true;
+		return ("object" === typeof value && null !== value && false === Array.isArray(value) || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "Record<string, string>",
+			value
+		}, _errorFactory)) && _ao2(value, _path + _accessExpressionAsString(key), _exceptionable) || _assertGuard(_exceptionable, {
+			method: "typia.createAssert",
+			path: _path + _accessExpressionAsString(key),
+			expected: "Record<string, string>",
+			value
+		}, _errorFactory);
+	});
+	const __is = (input) => "object" === typeof input && null !== input && _io0(input);
+	let _errorFactory;
+	return (input, errorFactory) => {
+		if (false === __is(input)) {
+			_errorFactory = errorFactory;
+			((input, _path, _exceptionable = true) => ("object" === typeof input && null !== input || _assertGuard(true, {
+				method: "typia.createAssert",
+				path: _path + "",
+				expected: "PackageManifest",
+				value: input
+			}, _errorFactory)) && _ao0(input, _path + "", true) || _assertGuard(true, {
+				method: "typia.createAssert",
+				path: _path + "",
+				expected: "PackageManifest",
+				value: input
+			}, _errorFactory))(input, "$input", true);
+		}
+		return input;
+	};
+})();
+const DEP_FIELDS = [
+	"dependencies",
+	"devDependencies",
+	"peerDependencies",
+	"optionalDependencies"
+];
+function listDependencies(graph, pkg) {
+	const out = [];
+	for (const field of DEP_FIELDS) {
+		const table = pkg.manifest[field];
+		if (!table) continue;
+		for (const [name, raw] of Object.entries(table)) out.push(resolveDependency(graph, pkg, field, name, raw, (range) => {
+			table[name] = range;
+		}));
+	}
+	return out;
+}
+function parseDependencySpec(raw) {
+	if (raw.startsWith("workspace:")) {
+		const body = raw.slice(10);
+		if (!body) return {
+			protocol: "workspace",
+			range: "*"
+		};
+		if (body.startsWith(".") || body.startsWith("/")) return {
+			protocol: "workspace",
+			range: body,
+			path: body
+		};
+		const separator = body.lastIndexOf("@");
+		if (separator > 0) return {
+			protocol: "workspace",
+			packageName: body.slice(0, separator),
+			range: body.slice(separator + 1) || "*"
+		};
+		if (separator === 0) return {
+			protocol: "workspace",
+			packageName: body,
+			range: "*"
+		};
+		return {
+			protocol: "workspace",
+			range: body
+		};
+	}
+	if (raw.startsWith("file:")) return {
+		protocol: "file",
+		path: raw.slice(5)
+	};
+	if (raw.startsWith("portal:")) return {
+		protocol: "portal",
+		path: raw.slice(7)
+	};
+	if (raw === "catalog:") return {
+		protocol: "catalog",
+		catalogName: "default"
+	};
+	if (raw.startsWith("catalog:")) return {
+		protocol: "catalog",
+		catalogName: raw.slice(8).trim() || "default"
+	};
+	if (raw.startsWith("npm:")) {
+		const spec = raw.slice(4);
+		const separator = spec.lastIndexOf("@");
+		if (separator > 0) return {
+			protocol: "npm",
+			alias: spec.slice(0, separator),
+			range: spec.slice(separator + 1)
+		};
+	}
+	return { range: raw };
+}
+function formatDependencySpec(spec, range) {
+	switch (spec.protocol) {
+		case "workspace":
+			if (spec.path) return `workspace:${spec.path}`;
+			if (spec.packageName) {
+				const next = range ?? spec.range;
+				return `workspace:${spec.packageName}@${next}`;
+			}
+			return `workspace:${range ?? spec.range}`;
+		case "file": return `file:${spec.path}`;
+		case "portal": return `portal:${spec.path}`;
+		case "catalog": return spec.catalogName === "default" ? "catalog:" : `catalog:${spec.catalogName}`;
+		case "npm": return `npm:${spec.alias}@${range ?? spec.range}`;
+		default: return range ?? spec.range;
+	}
+}
+async function resolveNpmGraph(cwd, client) {
+	const packages = /* @__PURE__ */ new Map();
+	const packagesByPath = /* @__PURE__ */ new Map();
+	const catalogSources = [];
+	function addPackage(packagePath, manifest) {
+		const pkg = new NpmPackage(packagePath, manifest);
+		packages.set(pkg.name, pkg);
+		packagesByPath.set(packagePath, pkg);
+	}
+	const patterns = [];
+	const rootManifest = await readManifest(cwd).catch(() => void 0);
+	if (rootManifest) {
+		catalogSources.push(createRootCatalogSource(rootManifest));
+		if (rootManifest.name) addPackage(cwd, rootManifest);
+		if (Array.isArray(rootManifest.workspaces)) patterns.push(...rootManifest.workspaces);
+		else if (rootManifest.workspaces?.packages) patterns.push(...rootManifest.workspaces.packages);
+	}
+	if (client === "pnpm") {
+		const pnpmWorkspacePath = path.join(cwd, "pnpm-workspace.yaml");
+		const content = await readFile(pnpmWorkspacePath, "utf8").catch((error) => {
+			if (isNodeError(error) && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		const data = content && assertPnpmWorkspace(parse$1(content));
+		if (data) {
+			catalogSources.push(createPnpmCatalogSource(pnpmWorkspacePath, data));
+			patterns.push(...data.packages ?? []);
+		}
+	} else if (client === "yarn") {
+		const yarnCatalog = await readYarnCatalog(cwd);
+		if (yarnCatalog) catalogSources.push(yarnCatalog);
+	}
+	if (patterns?.length) {
+		const candidatePaths = await expandWorkspacePatterns(cwd, patterns);
+		await Promise.all(candidatePaths.map(async (packagePath) => {
+			const manifest = await readManifest(packagePath).catch(() => void 0);
+			if (!manifest) return;
+			addPackage(packagePath, manifest);
+		}));
+	}
+	return {
+		root: cwd,
+		packages,
+		packagesByPath,
+		catalogs: catalogSources
+	};
+}
+function resolveDependency(graph, dependent, field, name, raw, write) {
+	const spec = parseDependencySpec(raw);
+	const linked = resolveLinkedPackage(graph, dependent, name, spec);
+	let range;
+	let customSetRange;
+	switch (spec.protocol) {
+		case "catalog":
+			for (const source of graph.catalogs) {
+				const resolved = source.resolve(name, spec.catalogName);
+				if (!resolved) continue;
+				range = resolved;
+				customSetRange = (v) => source.setRange(name, spec.catalogName, v);
+				break;
+			}
+			break;
+		case "workspace":
+			range = semver$1.validRange(spec.range) ? spec.range : void 0;
+			break;
+		case "npm":
+		case void 0:
+			range = spec.range;
+			break;
+	}
+	return {
+		field,
+		name,
+		spec,
+		linked,
+		range,
+		setRange(nextRange) {
+			if (customSetRange) {
+				customSetRange(nextRange);
+				return;
+			}
+			write(formatDependencySpec(spec, nextRange));
+		}
+	};
+}
+function resolveLinkedPackage(graph, dependent, name, spec) {
+	switch (spec.protocol) {
+		case "workspace":
+			if (spec.path) return findPackageByPath(graph, dependent.path, spec.path);
+			return graph.packages.get(spec.packageName || name);
+		case "file":
+		case "portal": return findPackageByPath(graph, dependent.path, spec.path);
+		case "npm": return graph.packages.get(spec.alias);
+		default: return graph.packages.get(name);
+	}
+}
+function findPackageByPath(graph, from, target) {
+	let absolute = path.resolve(from, target);
+	if (path.basename(absolute) === "package.json") absolute = path.dirname(absolute);
+	return graph.packagesByPath.get(absolute);
+}
+async function expandWorkspacePatterns(cwd, patterns) {
+	if (patterns.length === 0) return [];
+	return (await glob(patterns, {
+		absolute: true,
+		cwd,
+		ignore: ["**/node_modules/**", "**/dist/**"],
+		onlyDirectories: true,
+		onlyFiles: false
+	})).map((item) => item.endsWith(path.sep) ? item.slice(0, -1) : item);
+}
+async function readManifest(packagePath) {
+	const content = await readFile(path.join(packagePath, "package.json"), "utf8");
+	const parsed = JSON.parse(content);
+	assertPackageManifest(parsed);
+	return parsed;
+}
+function createPnpmCatalogSource(filePath, workspace) {
+	return {
+		resolve(name, catalogName) {
+			if (catalogName === "default") return workspace.catalog?.[name];
+			return workspace.catalogs?.[catalogName]?.[name];
+		},
+		setRange(name, catalogName, range) {
+			if (catalogName === "default") {
+				workspace.catalog ??= {};
+				workspace.catalog[name] = range;
+			} else {
+				workspace.catalogs ??= {};
+				workspace.catalogs[catalogName] ??= {};
+				workspace.catalogs[catalogName][name] = range;
+			}
+		},
+		async write() {
+			await writeFile(filePath, `${stringify(workspace, { lineWidth: 0 }).trim()}\n`);
+		}
+	};
+}
+function createRootCatalogSource(manifest) {
+	return {
+		resolve(name, catalogName) {
+			const fromWorkspaces = typeof manifest.workspaces === "object" && !Array.isArray(manifest.workspaces) ? catalogName === "default" ? manifest.workspaces.catalog?.[name] : manifest.workspaces.catalogs?.[catalogName]?.[name] : void 0;
+			if (fromWorkspaces) return fromWorkspaces;
+			if (catalogName === "default") return manifest.catalog?.[name];
+			return manifest.catalogs?.[catalogName]?.[name];
+		},
+		setRange(name, catalogName, range) {
+			if (typeof manifest.workspaces === "object" && !Array.isArray(manifest.workspaces)) if (catalogName === "default") {
+				manifest.workspaces.catalog ??= {};
+				manifest.workspaces.catalog[name] = range;
+			} else {
+				manifest.workspaces.catalogs ??= {};
+				manifest.workspaces.catalogs[catalogName] ??= {};
+				manifest.workspaces.catalogs[catalogName][name] = range;
+			}
+			else if (catalogName === "default") {
+				manifest.catalog ??= {};
+				manifest.catalog[name] = range;
+			} else {
+				manifest.catalogs ??= {};
+				manifest.catalogs[catalogName] ??= {};
+				manifest.catalogs[catalogName][name] = range;
+			}
+		}
+	};
+}
+async function readYarnCatalog(cwd) {
+	const filePath = path.join(cwd, ".yarnrc.yml");
+	const content = await readFile(filePath, "utf8").catch(() => void 0);
+	if (!content) return;
+	const doc = parseDocument(content);
+	return {
+		resolve(name, catalogName) {
+			const value = doc.getIn(catalogName === "default" ? ["catalog", name] : [
+				"catalogs",
+				catalogName,
+				name
+			]);
+			return typeof value === "string" ? value : void 0;
+		},
+		setRange(name, catalogName, range) {
+			doc.setIn(catalogName === "default" ? ["catalog", name] : [
+				"catalogs",
+				catalogName,
+				name
+			], range);
+		},
+		async write() {
+			const output = doc.toString();
+			await writeFile(filePath, output.endsWith("\n") ? output : `${output}\n`);
+		}
+	};
+}
+//#endregion
+//#region src/providers/npm.ts
+const validateNpmPackageLock = (() => {
+	const _io0 = (input) => "string" === typeof input.id && (void 0 === input.distTag || "string" === typeof input.distTag);
+	const _vo0 = (input, _path, _exceptionable = true) => ["string" === typeof input.id || _report(_exceptionable, {
+		path: _path + ".id",
+		expected: "string",
+		value: input.id
+	}), void 0 === input.distTag || "string" === typeof input.distTag || _report(_exceptionable, {
+		path: _path + ".distTag",
+		expected: "(string | undefined)",
+		value: input.distTag
+	})].every((flag) => flag);
+	const __is = (input) => "object" === typeof input && null !== input && _io0(input);
+	let errors;
+	let _report;
+	return _createStandardSchema((input) => {
+		if (false === __is(input)) {
+			errors = [];
+			_report = _validateReport(errors);
+			((input, _path, _exceptionable = true) => ("object" === typeof input && null !== input || _report(true, {
+				path: _path + "",
+				expected: "NpmPackageLock",
+				value: input
+			})) && _vo0(input, _path + "", true) || _report(true, {
+				path: _path + "",
+				expected: "NpmPackageLock",
+				value: input
+			}))(input, "$input", true);
+			const success = 0 === errors.length;
+			return success ? {
+				success,
+				data: input
+			} : {
+				success,
+				errors,
+				data: input
+			};
+		}
+		return {
+			success: true,
+			data: input
+		};
+	});
+})();
+const validateNpmMarkLatestLock = (() => {
+	const _io0 = (input) => "string" === typeof input.id;
+	const _vo0 = (input, _path, _exceptionable = true) => ["string" === typeof input.id || _report(_exceptionable, {
+		path: _path + ".id",
+		expected: "string",
+		value: input.id
+	})].every((flag) => flag);
+	const __is = (input) => "object" === typeof input && null !== input && _io0(input);
+	let errors;
+	let _report;
+	return _createStandardSchema((input) => {
+		if (false === __is(input)) {
+			errors = [];
+			_report = _validateReport(errors);
+			((input, _path, _exceptionable = true) => ("object" === typeof input && null !== input || _report(true, {
+				path: _path + "",
+				expected: "NpmMarkLatestLock",
+				value: input
+			})) && _vo0(input, _path + "", true) || _report(true, {
+				path: _path + "",
+				expected: "NpmMarkLatestLock",
+				value: input
+			}))(input, "$input", true);
+			const success = 0 === errors.length;
+			return success ? {
+				success,
+				data: input
+			} : {
+				success,
+				errors,
+				data: input
+			};
+		}
+		return {
+			success: true,
+			data: input
+		};
+	});
+})();
+function npm({ client: defaultClient, onBreakPeerDep = "set", updateLockFile = true, trustedPublish, bumpDep: getBumpDepType = ({ kind }) => {
+	switch (kind) {
+		case "dependencies":
+		case "optionalDependencies": return "patch";
+		case "devDependencies": return false;
+		case "peerDependencies":
+			if (onBreakPeerDep === "ignore") return false;
+			return "major";
+	}
+} } = {}) {
+	let active = false;
+	let client;
+	return {
+		name: "npm",
+		enforce: "pre",
+		async init() {
+			if (defaultClient) client = defaultClient;
+			else client = (await detect({ cwd: this.cwd }))?.name ?? "npm";
+			this.npm = { client };
+		},
+		async resolve() {
+			if (!this.npm) return;
+			const graph = await resolveNpmGraph(this.cwd, this.npm.client);
+			if (graph.packages.size === 0) return;
+			this.npm.graph = graph;
+			for (const pkg of graph.packages.values()) this.graph.add(pkg);
+			active = true;
+		},
+		async publishPreflight({ pkg }) {
+			if (!(pkg instanceof NpmPackage)) return;
+			return { shouldPublish: pkg.version !== void 0 && pkg.manifest.private !== true };
+		},
+		resolvePlanStatus({ plan }) {
+			if (!active) return;
+			return Array.from(plan.packages, async ([id, { preflight }]) => {
+				if (!preflight.shouldPublish) return;
+				const pkg = this.graph.get(id);
+				if (!(pkg instanceof NpmPackage) || !pkg.version) return;
+				if (!await isPackagePublished(pkg.name, pkg.version, pkg.getRegistry())) return "pending";
+			});
+		},
+		initPublishLock({ lock, draft }) {
+			for (const [id, pkg] of draft.getPackageDrafts()) {
+				if (!pkg.npm) continue;
+				lock.write("npm:packages", {
+					id,
+					distTag: pkg.npm.distTag
+				});
+			}
+		},
+		initPublishPlan({ lock, plan }) {
+			let data;
+			while (data = lock.read("npm:packages")) {
+				const validated = validateNpmPackageLock(data);
+				if (!validated.success) continue;
+				const parsed = validated.data;
+				const packagePlan = plan.packages.get(parsed.id);
+				if (!packagePlan) continue;
+				packagePlan.npm = { distTag: parsed.distTag };
+			}
+			while (data = lock.read("npm:mark-latest")) {
+				const validated = validateNpmMarkLatestLock(data);
+				if (!validated.success) continue;
+				const parsed = validated.data;
+				const packagePlan = plan.packages.get(parsed.id);
+				if (!packagePlan) continue;
+				packagePlan.npm ??= {};
+				packagePlan.npm.markLatest = true;
+			}
+		},
+		async publish({ pkg, plan }) {
+			if (!(pkg instanceof NpmPackage)) return;
+			const { distTag, markLatest } = plan.packages.get(pkg.id)?.npm ?? {};
+			const result = await publish(client, pkg, distTag);
+			if (result.type === "published" && markLatest) {
+				const tagResult = await x("npm", [
+					"dist-tag",
+					"add",
+					`${pkg.name}@${pkg.version}`,
+					"latest",
+					"--registry",
+					pkg.getRegistry()
+				], { nodeOptions: { cwd: pkg.path } });
+				if (tagResult.exitCode !== 0) return {
+					type: "failed",
+					error: execFailure("Failed to mark package as latest", tagResult).message
+				};
+			}
+			return result;
+		},
+		initDraft(plan) {
+			if (!active) return;
+			plan.addPolicy(depsPolicy(this, getBumpDepType));
+		},
+		async applyDraft(draft) {
+			if (!active || !this.npm?.graph) return;
+			const npmGraph = this.npm.graph;
+			const writes = [];
+			for (const pkg of npmGraph.packages.values()) {
+				const bumped = draft.getPackageDraft(pkg.id)?.bumpVersion(pkg);
+				if (bumped) pkg.manifest.version = bumped;
+			}
+			for (const pkg of npmGraph.packages.values()) {
+				for (const dep of pkg.listDependencies(npmGraph)) {
+					if (!dep.linked || !dep.range || !dep.setRange) continue;
+					if (!dep.linked.version || semver$1.satisfies(dep.linked.version, dep.range)) continue;
+					const isPeer = dep.field === "peerDependencies";
+					if (isPeer && onBreakPeerDep === "ignore") continue;
+					let updatedRange;
+					if (isPeer && onBreakPeerDep === "set") updatedRange = dep.linked.version;
+					else if (isPeer && onBreakPeerDep === "error") throw new Error(`[Tegami] the version of "${dep.linked.name}" is beyond its peer dependency constraint "${formatDependencySpec(dep.spec)}" in package "${pkg.name}", please update the constraint to satisfy.`);
+					else if (dep.range.startsWith("^")) updatedRange = `^${dep.linked.version}`;
+					else if (dep.range.startsWith("~")) updatedRange = `~${dep.linked.version}`;
+					else updatedRange = dep.linked.version;
+					dep.setRange(updatedRange);
+				}
+				writes.push(pkg.write());
+			}
+			for (const source of npmGraph.catalogs) writes.push(source.write?.());
+			await Promise.all(writes);
+		},
+		async applyCliDraft() {
+			if (!active || !updateLockFile) return;
+			const result = await x(client, ["install"], { nodeOptions: { cwd: this.cwd } });
+			if (result.exitCode !== 0) throw execFailure("Failed to update lockfile.", result);
+		},
+		initCli(cli) {
+			if (!trustedPublish) return;
+			registerNpmCli(cli, trustedPublish);
+		}
+	};
+}
+function depsPolicy(context, getBumpDepType) {
+	const npmGraph = context.npm?.graph;
+	if (!npmGraph) throw new Error("npm graph is missing");
+	const dependentMap = /* @__PURE__ */ new Map();
+	for (const pkg of npmGraph.packages.values()) for (const resolved of pkg.listDependencies(npmGraph)) {
+		if (!resolved.linked) continue;
+		const refs = dependentMap.get(resolved.linked.id);
+		const ref = {
+			dependent: pkg,
+			kind: resolved.field,
+			name: resolved.name,
+			spec: resolved.spec,
+			resolved
+		};
+		if (refs) refs.push(ref);
+		else dependentMap.set(resolved.linked.id, [ref]);
+	}
+	function needsDependencyUpdate(resolved, target) {
+		if (!resolved.linked) return false;
+		switch (resolved.spec.protocol) {
+			case "file":
+			case "portal": return true;
+			case "workspace": switch (resolved.spec.range) {
+				case "":
+				case "*": return true;
+				case "^":
+				case "~": return !semver$1.satisfies(target, `${resolved.spec.range}${resolved.linked.version ?? "0.0.0"}`);
+			}
+		}
+		if (!resolved.range || !semver$1.validRange(resolved.range)) return false;
+		return !semver$1.satisfies(target, resolved.range);
+	}
+	return {
+		id: "npm:deps",
+		onUpdate({ pkg, packageDraft: plan }) {
+			if (!(pkg instanceof NpmPackage)) return;
+			const deps = dependentMap.get(pkg.id);
+			if (!deps) return;
+			const bumped = plan.bumpVersion(pkg);
+			if (!bumped) return;
+			for (const dep of deps) {
+				if (pkg.group?.options.syncBump && dep.dependent.group === pkg.group) continue;
+				if (!needsDependencyUpdate(dep.resolved, bumped)) continue;
+				const bumpType = getBumpDepType(dep);
+				if (bumpType === false) continue;
+				this.bumpPackage(dep.dependent, {
+					type: bumpType,
+					reason: `update dependency "${dep.name}"`
+				});
+			}
+		}
+	};
+}
+async function publish(client, pkg, distTag) {
+	if (!pkg.version || await isPackagePublished(pkg.name, pkg.version, pkg.getRegistry())) return { type: "skipped" };
+	if (client === "bun") {
+		for (const script of [
+			"prepublishOnly",
+			"prepack",
+			"prepare"
+		]) {
+			if (!pkg.manifest.scripts?.[script]) continue;
+			const result = await x("bun", ["run", script], { nodeOptions: { cwd: pkg.path } });
+			if (result.exitCode === 0) continue;
+			return {
+				type: "failed",
+				error: execFailure(`Failed to run ${script} script for ${pkg.name}@${pkg.version}.`, result).message
+			};
+		}
+		const tarballPath = path.resolve(pkg.path, "pkg.tgz");
+		const packResult = await x("bun", [
+			"pm",
+			"pack",
+			"--filename",
+			tarballPath
+		], { nodeOptions: { cwd: pkg.path } });
+		if (packResult.exitCode !== 0) return {
+			type: "failed",
+			error: execFailure(`Failed to pack ${pkg.name}@${pkg.version}.`, packResult).message
+		};
+		const publishArgs = ["publish", tarballPath];
+		if (distTag) publishArgs.push("--tag", distTag);
+		const publishResult = await x("npm", publishArgs, { nodeOptions: { cwd: pkg.path } });
+		if (publishResult.exitCode !== 0) return {
+			type: "failed",
+			error: execFailure(`Failed to publish ${pkg.name}@${pkg.version}${distTag ? ` with dist-tag "${distTag}"` : ""}.`, publishResult).message
+		};
+		return { type: "published" };
+	}
+	let command;
+	const args = ["publish"];
+	if (distTag) args.push("--tag", distTag);
+	if (client === "pnpm") {
+		command = "pnpm";
+		args.push("--no-git-checks");
+	} else if (client === "yarn") command = "yarn";
+	else command = "npm";
+	const result = await x(command, args, { nodeOptions: { cwd: pkg.path } });
+	if (result.exitCode !== 0) return {
+		type: "failed",
+		error: execFailure(`Failed to publish ${pkg.name}@${pkg.version}${distTag ? ` with dist-tag "${distTag}"` : ""}.`, result).message
+	};
+	return { type: "published" };
+}
+async function isPackagePublished(name, version, registry) {
+	const response = await fetch(joinPath(registry, name, version), { headers: { Accept: "application/json" } });
+	if (response.status === 404) return false;
+	if (!response.ok) throw new Error(`Unable to validate ${name}@${version} against the npm registry${registry ? ` "${registry}"` : ""}.`);
+	return true;
+}
+//#endregion
+export { runPreflights as a, publishPlanStatus as i, NpmPackage as n, runPublishPlan as o, initPublishPlan as r, npm as t };