@0xrama/bnpm 0.0.1

package/dist/src/lockfile/index.js

@@ -0,0 +1,221 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+import YAML from "yaml";
+import { storePath } from "../cache/store.js";
+export class LockfileError extends Error {
+    constructor(message) {
+        super(`Lockfile error: ${message}`);
+        this.name = "LockfileError";
+    }
+}
+function objectFromMap(map, convert) {
+    return Object.fromEntries([...map].sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, convert(value, key)]));
+}
+export function createLockfile(graph, requirements, options, security) {
+    const requirementByName = new Map(requirements.map((requirement) => [requirement.name, requirement]));
+    const requirementByImporter = new Map();
+    for (const requirement of requirements) {
+        const importer = requirement.importer ?? ".";
+        let values = requirementByImporter.get(importer);
+        if (!values) {
+            values = new Map();
+            requirementByImporter.set(importer, values);
+        }
+        values.set(requirement.name, requirement);
+    }
+    const importerRoots = graph.importers ?? new Map([[".", graph.roots]]);
+    const decisions = new Map((security?.decisions ?? []).map((decision) => [decision.packageId, decision]));
+    const document = {
+        lockfileVersion: 1,
+        settings: { registry: options.registry, recentReleaseHours: options.recentReleaseHours },
+        importers: objectFromMap(importerRoots, (roots, importer) => ({
+            dependencies: objectFromMap(roots, (version, name) => ({
+                specifier: requirementByImporter.get(importer)?.get(name)?.specifier ?? requirementByName.get(name)?.specifier ?? version,
+                version,
+                type: requirementByImporter.get(importer)?.get(name)?.kind ?? requirementByName.get(name)?.kind ?? "dependency",
+            })),
+        })),
+        packages: objectFromMap(graph.packages, (pkg, id) => ({
+            resolution: pkg.localPath === undefined
+                ? { integrity: pkg.integrity, tarball: pkg.tarball.href, ...(pkg.source === undefined || pkg.source === "registry" ? {} : { source: pkg.source }) }
+                : { integrity: pkg.integrity, directory: pkg.localPath, source: "directory" },
+            ...(pkg.publishedAt === undefined ? {} : { publishedAt: pkg.publishedAt.toISOString() }),
+            ...(pkg.dependencies.size === 0 ? {} : { dependencies: Object.fromEntries(pkg.dependencies) }),
+            ...(security?.analyses.get(id)?.lifecycles.length ? {
+                scripts: Object.fromEntries(security.analyses.get(id)?.lifecycles.map((fact) => [fact.stage, { command: fact.command, commandHash: fact.commandHash, contentHash: fact.contentHash }]) ?? []),
+            } : {}),
+            ...(security?.analyses.get(id)?.analysis.findings.length ? {
+                security: { ruleSetVersion: security.analyses.get(id)?.analysis.ruleSetVersion, findings: security.analyses.get(id)?.analysis.findings },
+            } : {}),
+        })),
+        ...(security && [...decisions.values()].some((decision) => decision.approvedLifecycles.length > 0) ? {
+            approvals: Object.fromEntries([...decisions].filter(([, decision]) => decision.approvedLifecycles.length > 0).map(([id, decision]) => {
+                const pkg = graph.packages.get(id);
+                return [id, {
+                        integrity: pkg?.integrity,
+                        scripts: Object.fromEntries(decision.approvedLifecycles.map((fact) => [fact.stage, { commandHash: fact.commandHash, contentHash: fact.contentHash, approved: true }])),
+                    }];
+            })),
+        } : {}),
+    };
+    return YAML.stringify(document, { lineWidth: 0, sortMapEntries: true });
+}
+export async function writeLockfileAtomic(path, bytes) {
+    await mkdir(dirname(path), { recursive: true });
+    const temporary = join(dirname(path), `.${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporary, bytes, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, path);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+function mapping(value, field) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new LockfileError(`${field} must be a mapping`);
+    return value;
+}
+function identity(id) {
+    const context = id.indexOf("(");
+    const base = context < 0 ? id : id.slice(0, context);
+    const separator = base.lastIndexOf("@");
+    if (separator <= 0 || separator === base.length - 1)
+        throw new LockfileError(`invalid package identity ${id}`);
+    return { name: base.slice(0, separator), version: base.slice(separator + 1) };
+}
+export async function readLockfileGraph(path, storeRoot) {
+    let value;
+    try {
+        const document = YAML.parseDocument(await readFile(path, "utf8"), { uniqueKeys: true, strict: true });
+        if (document.errors.length > 0)
+            throw new LockfileError(document.errors[0]?.message ?? "invalid YAML");
+        value = document.toJS();
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            throw new LockfileError("offline or frozen install requires bnpm-lock.yaml");
+        throw error;
+    }
+    const root = mapping(value, "root");
+    if (root.lockfileVersion !== 1)
+        throw new LockfileError("unsupported lockfileVersion");
+    const settings = mapping(root.settings, "settings");
+    if (![1, 6, 24].includes(settings.recentReleaseHours))
+        throw new LockfileError("invalid recentReleaseHours");
+    const importerMappings = mapping(root.importers, "importers");
+    const importers = new Map();
+    const requirements = [];
+    for (const [importerName, rawImporter] of Object.entries(importerMappings).sort(([left], [right]) => left.localeCompare(right))) {
+        const importer = mapping(rawImporter, `importer ${importerName}`);
+        const roots = new Map();
+        for (const [name, raw] of Object.entries(mapping(importer.dependencies ?? {}, `importer ${importerName} dependencies`)).sort(([left], [right]) => left.localeCompare(right))) {
+            const entry = mapping(raw, `importer dependency ${importerName}:${name}`);
+            if (typeof entry.specifier !== "string" || typeof entry.version !== "string")
+                throw new LockfileError(`invalid importer dependency ${importerName}:${name}`);
+            const kind = entry.type ?? "dependency";
+            if (!["dependency", "dev", "optional", "peer", "workspace"].includes(kind))
+                throw new LockfileError(`invalid importer dependency type ${importerName}:${name}`);
+            roots.set(name, entry.version);
+            requirements.push({ name, specifier: entry.specifier, kind: kind, ...(importerName === "." ? {} : { importer: importerName }) });
+        }
+        importers.set(importerName, roots);
+    }
+    const roots = new Map(importers.get(".") ?? []);
+    const packages = new Map();
+    const lockedScripts = new Map();
+    const dangerousPackageIds = new Set();
+    for (const [id, raw] of Object.entries(mapping(root.packages, "packages")).sort(([left], [right]) => left.localeCompare(right))) {
+        const entry = mapping(raw, `package ${id}`);
+        const resolution = mapping(entry.resolution, `package ${id} resolution`);
+        if (typeof resolution.integrity !== "string" || (typeof resolution.tarball !== "string" && typeof resolution.directory !== "string"))
+            throw new LockfileError(`invalid resolution for ${id}`);
+        if (resolution.source !== undefined && !["registry", "directory", "tarball", "git"].includes(resolution.source))
+            throw new LockfileError(`invalid package source for ${id}`);
+        const parsedIdentity = identity(id);
+        const packageRoot = storePath(storeRoot, resolution.integrity);
+        let manifest;
+        try {
+            manifest = JSON.parse(await readFile(join(packageRoot, "package.json"), "utf8"));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                throw new LockfileError(`store entry is missing for ${id}`);
+            throw error;
+        }
+        if (manifest.name !== parsedIdentity.name || manifest.version !== parsedIdentity.version)
+            throw new LockfileError(`store identity mismatch for ${id}`);
+        const dependencyValues = mapping(entry.dependencies ?? {}, `package ${id} dependencies`);
+        const dependencies = new Map();
+        for (const [name, dependencyId] of Object.entries(dependencyValues)) {
+            if (typeof dependencyId !== "string")
+                throw new LockfileError(`invalid dependency ${id} -> ${name}`);
+            dependencies.set(name, dependencyId);
+        }
+        const publishedAt = typeof entry.publishedAt === "string" ? new Date(entry.publishedAt) : undefined;
+        if (publishedAt && Number.isNaN(publishedAt.getTime()))
+            throw new LockfileError(`invalid publication time for ${id}`);
+        packages.set(id, {
+            id,
+            name: parsedIdentity.name,
+            version: parsedIdentity.version,
+            integrity: resolution.integrity,
+            tarball: typeof resolution.tarball === "string" ? new URL(resolution.tarball) : pathToFileURL(resolution.directory),
+            ...(typeof resolution.directory === "string" ? { localPath: resolution.directory } : {}),
+            ...(typeof resolution.source === "string" ? { source: resolution.source } : {}),
+            ...(publishedAt === undefined ? {} : { publishedAt }),
+            manifest,
+            dependencies,
+        });
+        const scriptFacts = {};
+        for (const [stage, rawScript] of Object.entries(mapping(entry.scripts ?? {}, `package ${id} scripts`))) {
+            const script = mapping(rawScript, `package ${id} script ${stage}`);
+            if (typeof script.commandHash !== "string" || typeof script.contentHash !== "string")
+                throw new LockfileError(`invalid script facts for ${id} ${stage}`);
+            scriptFacts[stage] = { commandHash: script.commandHash, contentHash: script.contentHash };
+        }
+        lockedScripts.set(id, scriptFacts);
+        if (entry.security !== undefined) {
+            const security = mapping(entry.security, `package ${id} security`);
+            if (!Array.isArray(security.findings))
+                throw new LockfileError(`invalid security findings for ${id}`);
+            for (const rawFinding of security.findings) {
+                const finding = mapping(rawFinding, `package ${id} finding`);
+                if (finding.severity === "dangerous")
+                    dangerousPackageIds.add(id);
+            }
+        }
+    }
+    for (const importerRoots of importers.values())
+        for (const id of importerRoots.values())
+            if (!packages.has(id))
+                throw new LockfileError(`importer points to missing package ${id}`);
+    for (const pkg of packages.values())
+        for (const id of pkg.dependencies.values())
+            if (!packages.has(id))
+                throw new LockfileError(`${pkg.id} points to missing package ${id}`);
+    const approvals = {};
+    for (const [id, raw] of Object.entries(mapping(root.approvals ?? {}, "approvals"))) {
+        const pkg = packages.get(id);
+        if (!pkg)
+            throw new LockfileError(`approval points to missing package ${id}`);
+        const entry = mapping(raw, `approval ${id}`);
+        if (entry.integrity !== pkg.integrity)
+            throw new LockfileError(`approval integrity mismatch for ${id}`);
+        const scripts = {};
+        for (const [stage, rawScript] of Object.entries(mapping(entry.scripts, `approval ${id} scripts`))) {
+            const script = mapping(rawScript, `approval ${id} ${stage}`);
+            if (script.approved !== true || typeof script.commandHash !== "string" || typeof script.contentHash !== "string")
+                throw new LockfileError(`invalid script approval for ${id} ${stage}`);
+            const fact = lockedScripts.get(id)?.[stage];
+            if (!fact || fact.commandHash !== script.commandHash || fact.contentHash !== script.contentHash)
+                throw new LockfileError(`script approval no longer matches facts for ${id} ${stage}`);
+            scripts[stage] = { commandHash: script.commandHash, contentHash: script.contentHash };
+        }
+        approvals[pkg.name] = { version: pkg.version, integrity: pkg.integrity, scripts };
+    }
+    return { graph: { roots, packages, importers }, requirements, recentReleaseHours: settings.recentReleaseHours, approvals, dangerousPackageIds, lifecycleScripts: lockedScripts };
+}
+//# sourceMappingURL=index.js.map

package/dist/src/lockfile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lockfile/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAK9C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAOD,SAAS,aAAa,CAAI,GAA2B,EAAE,OAA2C;IAChG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7I,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAsB,EACtB,YAAoC,EACpC,OAAwB,EACxB,QAA4H;IAE5H,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1E,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,GAAG,CAAC;QAC7C,IAAI,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QACjF,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG;QACf,eAAe,EAAE,CAAC;QAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;QACxF,SAAS,EAAE,aAAa,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5D,YAAY,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBACrD,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,OAAO;gBACzH,OAAO;gBACP,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,YAAY;aAChH,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACpD,UAAU,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;gBACnJ,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE;YAC/E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YACxF,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;aAC9L,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzD,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE;aACzI,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnG,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACnI,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnC,OAAO,CAAC,EAAE,EAAE;wBACV,SAAS,EAAE,GAAG,EAAE,SAAS;wBACzB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;qBACvK,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACnE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC/H,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC/G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAiB;IACrE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,CAAC,CAAC;QACvG,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,mDAAmD,CAAC,CAAC;QACrI,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAA4B,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACvH,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;IACjE,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChI,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,YAAY,YAAY,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,YAAY,YAAY,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7K,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,uBAAuB,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7J,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;YACxC,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAc,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1K,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAA2B,EAAE,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1J,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0D,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoG,CAAC;IAClI,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChI,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9L,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAgB,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACvL,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,QAAgC,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;QAC7G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;YACpH,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,cAAc,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;QACvJ,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,IAAI,OAAO,YAAY,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YACrG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QACtH,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;YACf,EAAE;YACF,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,OAAO,EAAE,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,SAAmB,CAAC;YAC7H,GAAG,CAAC,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAsD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/H,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,QAAQ;YACR,YAAY;SACb,CAAC,CAAC;QACH,MAAM,WAAW,GAAiE,EAAE,CAAC;QACrF,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC;YACnE,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;YACzJ,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5F,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC;YACtG,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;gBAC7D,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW;oBAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,aAAa,IAAI,SAAS,CAAC,MAAM,EAAE;QAAE,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;IACpL,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,GAAG,CAAC,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAC7K,MAAM,SAAS,GAA2C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,OAAO,GAAiE,EAAE,CAAC;QACjF,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;YACxL,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,MAAM,IAAI,aAAa,CAAC,+CAA+C,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;YACvL,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACxF,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAgC,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AACjM,CAAC"}

package/dist/src/package/authoring.d.ts

@@ -0,0 +1,31 @@
+export declare function initializePackage(options: {
+    readonly directory: string;
+    readonly values?: Readonly<Partial<Record<"name" | "version" | "description" | "entry" | "license", string>>>;
+}): Promise<Readonly<Record<string, unknown>>>;
+export declare function initializeWorkspace(options: {
+    readonly root: string;
+    readonly workspace: string;
+    readonly createManifest: boolean;
+}): Promise<{
+    readonly root: string;
+    readonly directory: string;
+    readonly workspace: string;
+    readonly manifest?: Readonly<Record<string, unknown>>;
+}>;
+export declare function readPackageVersion(directory: string): Promise<{
+    readonly name: string;
+    readonly version: string;
+    readonly manifest: Record<string, unknown>;
+}>;
+export declare function nextPackageVersion(current: string, requested: string, options?: {
+    readonly preid?: string;
+    readonly allowSame?: boolean;
+}): string;
+export declare function changePackageVersion(directory: string, requested: string, options?: {
+    readonly preid?: string;
+    readonly allowSame?: boolean;
+}): Promise<{
+    readonly name: string;
+    readonly previous: string;
+    readonly version: string;
+}>;

package/dist/src/package/authoring.js

@@ -0,0 +1,125 @@
+import { randomBytes } from "node:crypto";
+import { mkdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import semver from "semver";
+import { PackError } from "./pack.js";
+async function atomicJson(path, value) {
+    await mkdir(dirname(path), { recursive: true });
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { flag: "wx", mode: 0o644 });
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+function defaultName(directory) {
+    const normalized = basename(directory).toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^[._-]+|[._-]+$/g, "");
+    if (!normalized)
+        throw new PackError("cannot infer a valid package name from the directory");
+    return normalized;
+}
+export async function initializePackage(options) {
+    const path = join(options.directory, "package.json");
+    try {
+        await readFile(path);
+        throw new PackError("package.json already exists");
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const name = options.values?.name || defaultName(options.directory);
+    if (!/^(?:@[^/@\s]+\/)?[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name))
+        throw new PackError("package name is invalid");
+    const version = options.values?.version || "1.0.0";
+    if (!semver.valid(version))
+        throw new PackError("package version must be exact semantic version");
+    const manifest = {
+        name,
+        version,
+        description: options.values?.description ?? "",
+        main: options.values?.entry || "index.js",
+        scripts: { test: "echo \"Error: no test specified\" && exit 1" },
+        keywords: [],
+        author: "",
+        license: options.values?.license || "ISC",
+    };
+    await atomicJson(path, manifest);
+    return manifest;
+}
+export async function initializeWorkspace(options) {
+    if (!options.workspace || options.workspace.includes("\0") || isAbsolute(options.workspace) || options.workspace.split(/[\\/]/).includes(".."))
+        throw new PackError("workspace init path must be a safe relative directory");
+    const root = await realpath(options.root);
+    const directory = resolve(root, options.workspace);
+    if (!directory.startsWith(`${root}${sep}`))
+        throw new PackError("workspace init path escapes the project root");
+    const rootPath = join(root, "package.json");
+    let document;
+    try {
+        const parsed = JSON.parse(await readFile(rootPath, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            throw new Error("not an object");
+        document = parsed;
+    }
+    catch (error) {
+        throw new PackError(`cannot read workspace root package.json: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const workspace = relative(root, directory).split(sep).join("/");
+    const current = document.workspaces;
+    if (current === undefined)
+        document.workspaces = [workspace];
+    else if (Array.isArray(current) && current.every((value) => typeof value === "string"))
+        document.workspaces = [...new Set([...current, workspace])];
+    else if (typeof current === "object" && current !== null && !Array.isArray(current) && Array.isArray(current.packages) && current.packages.every((value) => typeof value === "string"))
+        document.workspaces = { ...current, packages: [...new Set([...current.packages, workspace])] };
+    else
+        throw new PackError("workspace root has an invalid workspaces field");
+    await mkdir(directory, { recursive: true });
+    const manifest = options.createManifest ? await initializePackage({ directory }) : undefined;
+    try {
+        await atomicJson(rootPath, document);
+    }
+    catch (error) {
+        if (options.createManifest)
+            await rm(join(directory, "package.json"), { force: true });
+        throw error;
+    }
+    return { root, directory, workspace, ...(manifest === undefined ? {} : { manifest }) };
+}
+export async function readPackageVersion(directory) {
+    const path = join(directory, "package.json");
+    let manifest;
+    try {
+        const parsed = JSON.parse(await readFile(path, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            throw new Error("not an object");
+        manifest = parsed;
+    }
+    catch (error) {
+        throw new PackError(`cannot read package.json: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (typeof manifest.name !== "string" || typeof manifest.version !== "string" || !semver.valid(manifest.version))
+        throw new PackError("package.json requires a name and exact semantic version");
+    return { name: manifest.name, version: manifest.version, manifest };
+}
+export function nextPackageVersion(current, requested, options = {}) {
+    const release = ["major", "minor", "patch", "premajor", "preminor", "prepatch", "prerelease"].includes(requested)
+        ? options.preid === undefined ? semver.inc(current, requested) : semver.inc(current, requested, options.preid)
+        : semver.valid(requested);
+    if (!release)
+        throw new PackError(`invalid version or release type ${requested}`);
+    if (release === current && !options.allowSame)
+        throw new PackError(`version is already ${release}`);
+    return release;
+}
+export async function changePackageVersion(directory, requested, options = {}) {
+    const current = await readPackageVersion(directory);
+    const release = nextPackageVersion(current.version, requested, options);
+    await atomicJson(join(directory, "package.json"), { ...current.manifest, version: release });
+    return { name: current.name, previous: current.version, version: release };
+}
+//# sourceMappingURL=authoring.js.map

package/dist/src/package/authoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring.js","sourceRoot":"","sources":["../../../src/package/authoring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAwC;IAC9E,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACpH,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC7F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAGvC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACxK,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAClG,MAAM,QAAQ,GAA4B;QACxC,IAAI;QACJ,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;QAC9C,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,UAAU;QACzC,OAAO,EAAE,EAAE,IAAI,EAAE,6CAA6C,EAAE;QAChE,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK;KAC1C,CAAC;IACF,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgG;IACxI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC7N,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9F,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAAC,IAAI,QAAiC,CAAC;IACnF,IAAI,CAAC;QAAC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAAC,QAAQ,GAAG,MAAiC,CAAC;IAAC,CAAC;IACzO,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,4CAA4C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5I,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;IACtG,IAAI,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,CAAC;SACxD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,QAAQ,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;SAC/I,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,OAAkC,CAAC,QAAQ,CAAC,IAAK,OAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,QAAQ,CAAC,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAI,OAAkC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;;QACvW,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,IAAI,CAAC;QAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC7C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,cAAc;YAAE,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACtH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7C,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7G,QAAQ,GAAG,MAAiC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjM,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAO,GAA8D,EAAE;IAC5I,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/G,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAA+B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAA+B,EAAE,OAAO,CAAC,KAAK,CAAC;QAC1J,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;IACpG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,SAAiB,EAAE,OAAO,GAA8D,EAAE;IACtJ,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7F,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC"}

package/dist/src/package/pack.d.ts

@@ -0,0 +1,22 @@
+export declare class PackError extends Error {
+    constructor(message: string);
+}
+export interface PackedFile {
+    readonly path: string;
+    readonly size: number;
+    readonly mode: number;
+}
+export interface PackedPackage {
+    readonly id: string;
+    readonly name: string;
+    readonly version: string;
+    readonly filename: string;
+    readonly size: number;
+    readonly unpackedSize: number;
+    readonly shasum: string;
+    readonly integrity: string;
+    readonly files: readonly PackedFile[];
+    readonly manifest: Readonly<Record<string, unknown>>;
+    readonly tarball: Buffer;
+}
+export declare function packPackage(directory: string): Promise<PackedPackage>;