fimo 0.7.0-experimental.3 → 0.7.0-staging.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (143) hide show
  1. package/README.md +2 -3
  2. package/assets/skills/fimo/SKILL.md +1 -1
  3. package/assets/skills/fimo/references/assets.md +2 -2
  4. package/assets/skills/fimo/references/content.md +1 -1
  5. package/assets/skills/fimo/references/design.md +1 -1
  6. package/assets/skills/fimo-cli/SKILL.md +1 -1
  7. package/assets/skills/fimo-cli/references/assets.md +24 -7
  8. package/assets/skills/fimo-cli/references/content.md +2 -2
  9. package/assets/skills/fimo-cli/references/domains.md +1 -1
  10. package/assets/skills/fimo-cli/references/media.md +142 -132
  11. package/assets/skills/fimo-studio/references/custom-domains.md +1 -1
  12. package/dist/build/vite/index.d.ts.map +1 -0
  13. package/dist/build/vite/plugins/content-sync.d.ts.map +1 -0
  14. package/dist/build/vite/plugins/content-sync.test.d.ts +2 -0
  15. package/dist/build/vite/plugins/content-sync.test.d.ts.map +1 -0
  16. package/dist/build/vite/plugins/content-sync.test.js +64 -0
  17. package/dist/build/vite/plugins/data-id.d.ts.map +1 -0
  18. package/dist/build/vite/plugins/fimo-config.d.ts.map +1 -0
  19. package/dist/build/vite/plugins/fimo-config.test.d.ts +2 -0
  20. package/dist/build/vite/plugins/fimo-config.test.d.ts.map +1 -0
  21. package/dist/build/vite/plugins/fimo-config.test.js +46 -0
  22. package/dist/build/vite/plugins/overlay.d.ts.map +1 -0
  23. package/dist/build/vite/plugins/robots.d.ts.map +1 -0
  24. package/dist/build/vite/plugins/seo.d.ts.map +1 -0
  25. package/dist/build/vite/plugins/server-config.d.ts.map +1 -0
  26. package/dist/build/vite/plugins/sitemap.d.ts.map +1 -0
  27. package/dist/build/vite/plugins/translations.d.ts.map +1 -0
  28. package/dist/build/vite/plugins/translations.test.d.ts +2 -0
  29. package/dist/build/vite/plugins/translations.test.d.ts.map +1 -0
  30. package/dist/build/vite/plugins/translations.test.js +266 -0
  31. package/dist/cli/bundle.json +2 -3
  32. package/dist/cli/index.js +110670 -1196
  33. package/dist/runtime/app/FimoProviders.d.ts.map +1 -0
  34. package/dist/runtime/app/FimoScripts.d.ts.map +1 -0
  35. package/dist/runtime/app/index.d.ts.map +1 -0
  36. package/dist/runtime/app/prefetch.d.ts.map +1 -0
  37. package/dist/runtime/content/DataSourcesProvider.d.ts.map +1 -0
  38. package/dist/runtime/content/RefreshContentProvider.d.ts.map +1 -0
  39. package/dist/runtime/content/RefreshContentProvider.test.d.ts +2 -0
  40. package/dist/runtime/content/RefreshContentProvider.test.d.ts.map +1 -0
  41. package/dist/runtime/content/RefreshContentProvider.test.js +33 -0
  42. package/dist/runtime/content/parseCollectionResponse.d.ts.map +1 -0
  43. package/dist/runtime/content/parseCollectionResponse.test.d.ts +2 -0
  44. package/dist/runtime/content/parseCollectionResponse.test.d.ts.map +1 -0
  45. package/dist/runtime/content/parseCollectionResponse.test.js +20 -0
  46. package/dist/runtime/content/utils/retrieve-data-sources.d.ts.map +1 -0
  47. package/dist/runtime/core/AppErrorBoundary.d.ts.map +1 -0
  48. package/dist/runtime/core/ViteLifecycles.d.ts.map +1 -0
  49. package/dist/runtime/i18n/FimoLocaleContext.d.ts.map +1 -0
  50. package/dist/runtime/i18n/locale.d.ts.map +1 -0
  51. package/dist/runtime/i18n/locale.test.d.ts +2 -0
  52. package/dist/runtime/i18n/locale.test.d.ts.map +1 -0
  53. package/dist/runtime/i18n/locale.test.js +58 -0
  54. package/dist/runtime/iframe/ConsoleErrorProvider.d.ts.map +1 -0
  55. package/dist/runtime/iframe/ScreenshotProvider.d.ts.map +1 -0
  56. package/dist/runtime/iframe/runtime/overlay-hmr.d.ts.map +1 -0
  57. package/dist/runtime/iframe/runtime/overlay-runtime.d.ts.map +1 -0
  58. package/dist/runtime/index.d.ts +0 -3
  59. package/dist/runtime/index.d.ts.map +1 -0
  60. package/dist/runtime/index.js +0 -2
  61. package/dist/runtime/paths/get-fimo-paths.d.ts.map +1 -0
  62. package/dist/runtime/paths/get-fimo-paths.test.d.ts +2 -0
  63. package/dist/runtime/paths/get-fimo-paths.test.d.ts.map +1 -0
  64. package/dist/runtime/paths/get-fimo-paths.test.js +69 -0
  65. package/dist/runtime/paths/index.d.ts.map +1 -0
  66. package/dist/runtime/paths/types.d.ts.map +1 -0
  67. package/dist/runtime/primitives/components/Boolean.d.ts.map +1 -0
  68. package/dist/runtime/primitives/components/Date.d.ts.map +1 -0
  69. package/dist/runtime/primitives/components/Image.d.ts.map +1 -0
  70. package/dist/runtime/primitives/components/RichText.d.ts.map +1 -0
  71. package/dist/runtime/primitives/components/StaticImage.d.ts.map +1 -0
  72. package/dist/runtime/primitives/components/Text.d.ts.map +1 -0
  73. package/dist/runtime/primitives/components/Video.d.ts.map +1 -0
  74. package/dist/runtime/primitives/components/index.d.ts.map +1 -0
  75. package/dist/runtime/primitives/index.d.ts.map +1 -0
  76. package/dist/runtime/primitives/lib/image-optimization.d.ts.map +1 -0
  77. package/dist/runtime/primitives/lib/index.d.ts.map +1 -0
  78. package/dist/runtime/primitives/lib/primitives.d.ts.map +1 -0
  79. package/dist/runtime/primitives/lib/query.d.ts.map +1 -0
  80. package/dist/runtime/primitives/lib/template.d.ts.map +1 -0
  81. package/dist/runtime/primitives/lib/useFimoLiveValue.d.ts.map +1 -0
  82. package/dist/runtime/primitives/public-surface.test.d.ts +2 -0
  83. package/dist/runtime/primitives/public-surface.test.d.ts.map +1 -0
  84. package/dist/runtime/primitives/public-surface.test.js +49 -0
  85. package/dist/runtime/primitives/translations.d.ts.map +1 -0
  86. package/dist/runtime/react-router/index.d.ts.map +1 -0
  87. package/dist/runtime/react-router/navigation-utils.d.ts.map +1 -0
  88. package/dist/runtime/react-router/navigation.d.ts.map +1 -0
  89. package/dist/runtime/react-router/navigation.test.d.ts +2 -0
  90. package/dist/runtime/react-router/navigation.test.d.ts.map +1 -0
  91. package/dist/runtime/react-router/navigation.test.js +35 -0
  92. package/dist/runtime/react-router/routes.d.ts.map +1 -0
  93. package/dist/runtime/react-router/routes.test.d.ts +2 -0
  94. package/dist/runtime/react-router/routes.test.d.ts.map +1 -0
  95. package/dist/runtime/react-router/routes.test.js +67 -0
  96. package/dist/runtime/routing/AppResetScrollOnNavigate.d.ts.map +1 -0
  97. package/dist/runtime/routing/AppRoutesProvider.d.ts.map +1 -0
  98. package/dist/runtime/seo/buildSeoForPath.d.ts.map +1 -0
  99. package/dist/runtime/seo/htmlProps.d.ts.map +1 -0
  100. package/dist/runtime/seo/index.d.ts.map +1 -0
  101. package/dist/runtime/seo/resolver.d.ts.map +1 -0
  102. package/dist/runtime/shared/fimo-config.server.d.ts.map +1 -0
  103. package/dist/runtime/shared/fimo-config.types.d.ts.map +1 -0
  104. package/dist/runtime/t/OptionalTracking.d.ts.map +1 -0
  105. package/dist/runtime/t/OptionalTracking.test.d.ts +2 -0
  106. package/dist/runtime/t/OptionalTracking.test.d.ts.map +1 -0
  107. package/dist/runtime/t/OptionalTracking.test.js +11 -0
  108. package/dist/runtime/t/Pageview.d.ts.map +1 -0
  109. package/dist/runtime/templates.d.ts.map +1 -0
  110. package/dist/scripts/generated-types.test.js +212 -0
  111. package/dist/scripts/lint-translation-keys.test.d.ts +1 -0
  112. package/dist/scripts/lint-translation-keys.test.js +16 -0
  113. package/dist/scripts/sync-schemas.test.d.ts +1 -0
  114. package/dist/scripts/sync-schemas.test.js +144 -0
  115. package/dist/scripts/validate-route-metadata.test.d.ts +1 -0
  116. package/dist/scripts/validate-route-metadata.test.js +116 -0
  117. package/dist/scripts/validate-schemas.test.d.ts +1 -0
  118. package/dist/scripts/validate-schemas.test.js +263 -0
  119. package/package.json +13 -31
  120. package/scripts/add-ext.mjs +47 -0
  121. package/scripts/bump-version.mjs +58 -0
  122. package/scripts/bundle-cli.mjs +123 -0
  123. package/scripts/install-cli.mjs +36 -0
  124. package/scripts/lib/channels.mjs +70 -0
  125. package/scripts/lib/dev-release-state.mjs +44 -0
  126. package/scripts/lib/dev-release-state.test.ts +36 -0
  127. package/scripts/lib/postinstall-onboarding.test.ts +82 -0
  128. package/scripts/lib/release-core.mjs +225 -0
  129. package/scripts/lib/release-core.test.ts +147 -0
  130. package/scripts/migration-qa-gate.test.ts +155 -0
  131. package/scripts/publish-npm.mjs +180 -0
  132. package/templates/react-router/package.json +1 -1
  133. package/templates/react-router/src/pages/Index.tsx +1 -1
  134. package/dist/runtime/content/client/createContentClient.d.ts +0 -5
  135. package/dist/runtime/content/client/createContentClient.js +0 -300
  136. package/dist/runtime/content/client/createSingletonClient.d.ts +0 -5
  137. package/dist/runtime/content/client/createSingletonClient.js +0 -108
  138. package/dist/runtime/content/client/internal.d.ts +0 -44
  139. package/dist/runtime/content/client/internal.js +0 -236
  140. package/dist/runtime/content/client/types.d.ts +0 -136
  141. package/dist/runtime/content/client/useQueryLocale.d.ts +0 -2
  142. package/dist/runtime/content/client/useQueryLocale.js +0 -6
  143. /package/dist/{runtime/content/client/types.js → scripts/generated-types.test.d.ts} +0 -0
@@ -0,0 +1,70 @@
1
+ // Single source of truth for fimo release channels.
2
+ //
3
+ // channel → { source, apiUrl, webUrl, distTag, prerelease }
4
+ //
5
+ // Read by the npm publish path (scripts/publish-npm.mjs) and the CI
6
+ // release workflow. Defined ONCE so the npm and (legacy) R2 paths can
7
+ // never drift on "what does staging mean" — the bug class behind a
8
+ // published build accidentally pointing at the wrong API.
9
+ //
10
+ // Hard rule (D5): a published package bakes ONLY staging or prod. Never a
11
+ // tunnel or localhost — that would leak a private URL to the public
12
+ // registry. Tunnels/localhost are runtime FIMO_API_URL overrides, never
13
+ // baked. `ALLOWED_API_URLS` enforces this at publish time.
14
+
15
+ // Staging lives on the .team domain; production is fimo.ai.
16
+ export const STAGING_API_URL = 'https://api.staging.fimo.team';
17
+ export const STAGING_WEB_URL = 'https://staging.fimo.team';
18
+ export const PROD_API_URL = 'https://api.fimo.ai';
19
+ export const PROD_WEB_URL = 'https://fimo.ai';
20
+
21
+ /**
22
+ * @typedef {Object} Channel
23
+ * @property {'npm'} source - marks the published build's origin
24
+ * @property {string} apiUrl - cloud API base baked into release.json
25
+ * @property {string} webUrl - web URL baked into release.json
26
+ * @property {string} distTag - npm dist-tag to publish under
27
+ * @property {boolean} prerelease - true → synthesize a disposable X.Y.Z-<tag>.N version
28
+ */
29
+
30
+ /** @type {Record<string, Channel>} */
31
+ export const CHANNELS = {
32
+ experimental: {
33
+ source: 'npm',
34
+ apiUrl: STAGING_API_URL,
35
+ webUrl: STAGING_WEB_URL,
36
+ distTag: 'experimental',
37
+ prerelease: true,
38
+ },
39
+ staging: {
40
+ source: 'npm',
41
+ apiUrl: STAGING_API_URL,
42
+ webUrl: STAGING_WEB_URL,
43
+ distTag: 'staging',
44
+ prerelease: true,
45
+ },
46
+ latest: {
47
+ source: 'npm',
48
+ apiUrl: PROD_API_URL,
49
+ webUrl: PROD_WEB_URL,
50
+ distTag: 'latest',
51
+ prerelease: false,
52
+ },
53
+ };
54
+
55
+ // A published package may bake ONLY these api URLs. Everything else
56
+ // (localhost, tunnels) is refused at publish time.
57
+ export const ALLOWED_API_URLS = new Set([STAGING_API_URL, PROD_API_URL]);
58
+
59
+ /**
60
+ * Resolve a channel by name, throwing on an unknown name.
61
+ * @param {string} name
62
+ * @returns {Channel}
63
+ */
64
+ export function resolveChannel(name) {
65
+ const channel = CHANNELS[name];
66
+ if (!channel) {
67
+ throw new Error(`Unknown channel "${name}". Valid channels: ${Object.keys(CHANNELS).join(', ')}.`);
68
+ }
69
+ return channel;
70
+ }
@@ -0,0 +1,44 @@
1
+ import { spawnSync } from 'node:child_process';
2
+ import { mkdirSync, writeFileSync } from 'node:fs';
3
+ import { relative, resolve } from 'node:path';
4
+
5
+ /**
6
+ * Record the latest locally-published experimental CLI version for this
7
+ * checkout. `fimo deploy` uses this to swap a project-local `file:` dependency
8
+ * to an immutable npm version before pushing to a remote sandbox.
9
+ *
10
+ * @param {string} cliRoot - apps/cli root
11
+ * @param {{ version: string, channel: string }} release
12
+ * @returns {string} the file written
13
+ */
14
+ export function writeDevReleaseState(cliRoot, release) {
15
+ const repoRoot = resolve(cliRoot, '..', '..');
16
+ const dir = resolve(repoRoot, '.fimo');
17
+ mkdirSync(dir, { recursive: true });
18
+
19
+ const payload = {
20
+ version: release.version,
21
+ channel: release.channel,
22
+ packageRoot: relative(repoRoot, cliRoot),
23
+ gitSha: readGitSha(repoRoot),
24
+ publishedAt: new Date().toISOString(),
25
+ };
26
+
27
+ const file = resolve(dir, 'dev.json');
28
+ writeFileSync(file, JSON.stringify(payload, null, 2) + '\n');
29
+ return file;
30
+ }
31
+
32
+ function readGitSha(repoRoot) {
33
+ const result = spawnSync('git', ['rev-parse', 'HEAD'], {
34
+ cwd: repoRoot,
35
+ encoding: 'utf8',
36
+ });
37
+ if (result.status === 0) {
38
+ const sha = result.stdout.trim();
39
+ if (sha.length > 0) {
40
+ return sha;
41
+ }
42
+ }
43
+ return null;
44
+ }
@@ -0,0 +1,36 @@
1
+ import fs from 'node:fs';
2
+ import os from 'node:os';
3
+ import path from 'node:path';
4
+
5
+ import { afterEach, describe, expect, it } from 'vitest';
6
+
7
+ import { writeDevReleaseState } from './dev-release-state.mjs';
8
+
9
+ const tmpRoots: string[] = [];
10
+
11
+ afterEach(() => {
12
+ for (const root of tmpRoots.splice(0)) {
13
+ fs.rmSync(root, { recursive: true, force: true });
14
+ }
15
+ });
16
+
17
+ describe('writeDevReleaseState', () => {
18
+ it('writes repo-root .fimo/dev.json for the checkout', () => {
19
+ const root = fs.mkdtempSync(path.join(os.tmpdir(), 'fimo-dev-state-'));
20
+ tmpRoots.push(root);
21
+ const cliRoot = path.join(root, 'apps', 'cli');
22
+ fs.mkdirSync(cliRoot, { recursive: true });
23
+
24
+ const file = writeDevReleaseState(cliRoot, {
25
+ version: '0.2.3-experimental.42',
26
+ channel: 'experimental',
27
+ });
28
+
29
+ expect(file).toBe(path.join(root, '.fimo', 'dev.json'));
30
+ expect(JSON.parse(fs.readFileSync(file, 'utf8'))).toMatchObject({
31
+ version: '0.2.3-experimental.42',
32
+ channel: 'experimental',
33
+ packageRoot: 'apps/cli',
34
+ });
35
+ });
36
+ });
@@ -0,0 +1,82 @@
1
+ import { describe, expect, it } from 'vitest';
2
+
3
+ import { isGlobalInstall, parseYesNo, shouldPromptForGlobalSkills } from './postinstall-onboarding.mjs';
4
+
5
+ describe('isGlobalInstall', () => {
6
+ it('detects npm global installs', () => {
7
+ expect(isGlobalInstall({ npm_config_global: 'true' })).toBe(true);
8
+ });
9
+
10
+ it('detects package-manager location=global installs', () => {
11
+ expect(isGlobalInstall({ npm_config_location: 'global' })).toBe(true);
12
+ });
13
+
14
+ it('ignores local installs', () => {
15
+ expect(isGlobalInstall({})).toBe(false);
16
+ });
17
+ });
18
+
19
+ describe('shouldPromptForGlobalSkills', () => {
20
+ it('prompts only for interactive global installs', () => {
21
+ expect(
22
+ shouldPromptForGlobalSkills({
23
+ env: { npm_config_global: 'true' },
24
+ stdinIsTTY: true,
25
+ stdoutIsTTY: true,
26
+ })
27
+ ).toEqual({ ok: true });
28
+ });
29
+
30
+ it('skips CI and non-interactive installs', () => {
31
+ expect(
32
+ shouldPromptForGlobalSkills({
33
+ env: { npm_config_global: 'true', CI: '1' },
34
+ stdinIsTTY: true,
35
+ stdoutIsTTY: true,
36
+ })
37
+ ).toMatchObject({ ok: false, reason: 'ci' });
38
+ expect(
39
+ shouldPromptForGlobalSkills({
40
+ env: { npm_config_global: 'true' },
41
+ stdinIsTTY: false,
42
+ stdoutIsTTY: true,
43
+ })
44
+ ).toMatchObject({ ok: false, reason: 'non-interactive' });
45
+ });
46
+
47
+ it('honors the explicit skip env var', () => {
48
+ expect(
49
+ shouldPromptForGlobalSkills({
50
+ env: { npm_config_global: 'true', FIMO_SKIP_POSTINSTALL_PROMPT: '1' },
51
+ stdinIsTTY: true,
52
+ stdoutIsTTY: true,
53
+ })
54
+ ).toMatchObject({ ok: false, reason: 'disabled' });
55
+ });
56
+
57
+ it('skips package-manager assume-yes installs', () => {
58
+ expect(
59
+ shouldPromptForGlobalSkills({
60
+ env: { npm_config_global: 'true', npm_config_yes: 'true' },
61
+ stdinIsTTY: true,
62
+ stdoutIsTTY: true,
63
+ })
64
+ ).toMatchObject({ ok: false, reason: 'assume-yes-install' });
65
+ expect(
66
+ shouldPromptForGlobalSkills({
67
+ env: { npm_config_global: 'true', npm_config_force: 'true' },
68
+ stdinIsTTY: true,
69
+ stdoutIsTTY: true,
70
+ })
71
+ ).toMatchObject({ ok: false, reason: 'assume-yes-install' });
72
+ });
73
+ });
74
+
75
+ describe('parseYesNo', () => {
76
+ it('parses yes, no, and empty defaults', () => {
77
+ expect(parseYesNo('y')).toBe(true);
78
+ expect(parseYesNo('no')).toBe(false);
79
+ expect(parseYesNo('', true)).toBe(true);
80
+ expect(parseYesNo('', false)).toBe(false);
81
+ });
82
+ });
@@ -0,0 +1,225 @@
1
+ // Shared release-core: the channel-aware release.json bake.
2
+ //
3
+ // This is the single place that stamps which environment a published
4
+ // build talks to. Both the npm publish path and any future CI job call
5
+ // it, so the "which URL goes in which build" decision can't drift.
6
+ //
7
+ // `release.json` is a publish artifact: it is gitignored (apps/cli/.gitignore)
8
+ // and only exists transiently while packing. The CLI reads it at runtime as
9
+ // `FIMO_API_URL env || baked release.json || localhost` — so the bake only
10
+ // governs a bare `npm i -g fimo` with no env set. The sandbox always
11
+ // overrides it via the injected `.env`.
12
+
13
+ import { existsSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
14
+ import { join, resolve } from 'node:path';
15
+
16
+ import { ALLOWED_API_URLS } from './channels.mjs';
17
+
18
+ const TEMPLATE_PKG_REL = 'templates/react-router/package.json';
19
+ const TEMPLATE_LOCK_REL = 'templates/react-router/pnpm-lock.yaml';
20
+
21
+ /**
22
+ * Write a `release.json` for a published (`source: 'npm'`) build using the
23
+ * channel's baked URLs. Refuses any apiUrl not on the allowlist so a
24
+ * tunnel/localhost can never reach the public registry (D5).
25
+ *
26
+ * @param {string} cliRoot - apps/cli root
27
+ * @param {import('./channels.mjs').Channel} channel
28
+ * @returns {string} the path written
29
+ */
30
+ export function writeReleaseJson(cliRoot, channel) {
31
+ if (!ALLOWED_API_URLS.has(channel.apiUrl)) {
32
+ throw new Error(
33
+ `Refusing to bake non-allowlisted apiUrl "${channel.apiUrl}" into a published package. ` +
34
+ `Published channels may bake only staging or prod (D5).`
35
+ );
36
+ }
37
+ const payload = {
38
+ source: channel.source,
39
+ apiUrl: channel.apiUrl,
40
+ webUrl: channel.webUrl,
41
+ };
42
+ const file = resolve(cliRoot, 'release.json');
43
+ writeFileSync(file, JSON.stringify(payload, null, 2) + '\n');
44
+ return file;
45
+ }
46
+
47
+ /**
48
+ * Pin the bundled template's `fimo` dependency to an exact version at pack
49
+ * time, so a project scaffolded from `fimo@X` depends on exactly `fimo@X`
50
+ * (immutable, reproducible — no mutable URL, no caret drift). The committed
51
+ * template keeps a dev-friendly value; this overwrites it only for the
52
+ * tarball and the returned function restores it afterwards.
53
+ *
54
+ * @param {string} cliRoot
55
+ * @param {string} version - exact version to pin (e.g. "0.3.0" or "0.3.0-experimental.4")
56
+ * @returns {() => void} restore - rewrites the original file contents back
57
+ */
58
+ export function pinTemplateFimo(cliRoot, version) {
59
+ const file = resolve(cliRoot, TEMPLATE_PKG_REL);
60
+ if (!existsSync(file)) {
61
+ return () => {};
62
+ }
63
+ const original = readFileSync(file, 'utf8');
64
+ const pkg = JSON.parse(original);
65
+ let changed = false;
66
+ for (const field of ['dependencies', 'devDependencies']) {
67
+ if (pkg[field] && typeof pkg[field].fimo === 'string' && pkg[field].fimo !== version) {
68
+ pkg[field].fimo = version;
69
+ changed = true;
70
+ }
71
+ }
72
+ if (changed) {
73
+ writeFileSync(file, JSON.stringify(pkg, null, 2) + '\n');
74
+ }
75
+ return () => writeFileSync(file, original);
76
+ }
77
+
78
+ /**
79
+ * Remove the template's pnpm-lock.yaml from the tarball at pack time.
80
+ *
81
+ * We can't ship a correct lockfile: it would have to pin the exact version
82
+ * we're about to publish, which isn't on the registry yet (chicken-and-egg).
83
+ * A stale lockfile pinning a different spec than package.json breaks frozen
84
+ * installs (the 2026-06-11 outage class). With an exact, immutable version in
85
+ * package.json, `fimo create` + a fresh `pnpm install` resolves
86
+ * deterministically — so shipping no lockfile is the correct choice.
87
+ * `scaffold.ts` already deletes the lockfile whenever it rewrites the dep, so
88
+ * this only matters for the exact-npm-match path, but it's always safe.
89
+ *
90
+ * @param {string} cliRoot
91
+ * @returns {() => void} restore - rewrites the original lockfile back, if any
92
+ */
93
+ export function stripTemplateLockfile(cliRoot) {
94
+ const file = resolve(cliRoot, TEMPLATE_LOCK_REL);
95
+ if (!existsSync(file)) {
96
+ return () => {};
97
+ }
98
+ const original = readFileSync(file, 'utf8');
99
+ rmSync(file, { force: true });
100
+ return () => writeFileSync(file, original);
101
+ }
102
+
103
+ /**
104
+ * Parse `npm view <name> versions --json` output into a flat list of version
105
+ * strings, tolerating every shape npm has shipped: an array of strings
106
+ * (npm <= 11), a bare string when exactly one version is published
107
+ * (npm <= 11), and the npm 12 wrapper — "npm view --json now always returns
108
+ * an array", one entry per matched version, i.e. `[[...versions]]` for a bare
109
+ * package name. Returns null when nothing version-shaped survives (error
110
+ * envelopes, empty output), so callers fall back to the run-number/timestamp
111
+ * counter instead of trusting garbage.
112
+ *
113
+ * @param {string} stdout - raw stdout of `npm view <name> versions --json`
114
+ * @returns {string[] | null}
115
+ */
116
+ export function parsePublishedVersions(stdout) {
117
+ let parsed;
118
+ try {
119
+ parsed = JSON.parse(stdout);
120
+ } catch {
121
+ return null;
122
+ }
123
+ const versions = (Array.isArray(parsed) ? parsed : [parsed]).flat().filter((version) => typeof version === 'string');
124
+ return versions.length > 0 ? versions : null;
125
+ }
126
+
127
+ /**
128
+ * Next per-version prerelease counter: one past the highest already-published
129
+ * `<base>-<distTag>.<n>` on npm. Counting from what's actually published
130
+ * (instead of resetting blindly to 1) keeps the counter collision-proof even
131
+ * when the projected base flaps back to a value that already has prereleases —
132
+ * npm versions are immutable, so a blind reset would make the publish fail.
133
+ *
134
+ * @param {readonly string[]} existingVersions - all published versions of the package
135
+ * @param {string} base - X.Y.Z base (no prerelease suffix)
136
+ * @param {string} distTag
137
+ * @returns {number}
138
+ */
139
+ export function nextPrereleaseCounter(existingVersions, base, distTag) {
140
+ const prefix = `${base}-${distTag}.`;
141
+ let max = 0;
142
+ for (const version of existingVersions) {
143
+ if (!version.startsWith(prefix)) {
144
+ continue;
145
+ }
146
+ const n = Number(version.slice(prefix.length));
147
+ if (Number.isInteger(n) && n > max) {
148
+ max = n;
149
+ }
150
+ }
151
+ return max + 1;
152
+ }
153
+
154
+ /**
155
+ * Compute the version to publish for a channel.
156
+ * - Stable (`latest`) publishes the exact package.json version.
157
+ * - Prerelease channels synthesize a disposable `X.Y.Z-<distTag>.<n>`.
158
+ * `n` counts per base version (`0.3.5-staging.1`, `.2`, …) when the
159
+ * published versions could be fetched from npm; otherwise it falls back
160
+ * to the CI run number, then a timestamp.
161
+ *
162
+ * @param {string} baseVersion - package.json version
163
+ * @param {import('./channels.mjs').Channel} channel
164
+ * @param {{ runId?: string, existingVersions?: readonly string[] }} [opts]
165
+ * @returns {string}
166
+ */
167
+ export function computePublishVersion(baseVersion, channel, opts = {}) {
168
+ if (!channel.prerelease) {
169
+ return baseVersion;
170
+ }
171
+ // Strip any existing prerelease suffix from the base so we don't stack them.
172
+ const base = baseVersion.split('-')[0];
173
+ const n = opts.existingVersions
174
+ ? String(nextPrereleaseCounter(opts.existingVersions, base, channel.distTag))
175
+ : (opts.runId ?? String(Date.now()));
176
+ return `${base}-${channel.distTag}.${n}`;
177
+ }
178
+
179
+ const BUMP_RANK = { patch: 1, minor: 2, major: 3 };
180
+
181
+ /**
182
+ * Peek at pending changeset files and compute the version the next
183
+ * `changeset version` run will produce for `fimo`. Prerelease channels use
184
+ * this as their base so a staging build advertises the version prod will
185
+ * actually ship (`0.3.4-staging.26` while 0.3.4 is pending) instead of the
186
+ * already-released base. No pending changesets (or no .changeset dir) →
187
+ * base unchanged.
188
+ *
189
+ * @param {string} baseVersion - package.json version
190
+ * @param {string} changesetDir - absolute path to the repo's .changeset dir
191
+ * @returns {string}
192
+ */
193
+ export function nextVersionFromChangesets(baseVersion, changesetDir) {
194
+ let entries;
195
+ try {
196
+ entries = readdirSync(changesetDir);
197
+ } catch {
198
+ return baseVersion;
199
+ }
200
+
201
+ let maxBump = null;
202
+ for (const name of entries) {
203
+ if (!name.endsWith('.md') || name === 'README.md') {
204
+ continue;
205
+ }
206
+ const text = readFileSync(join(changesetDir, name), 'utf8');
207
+ const frontmatter = text.match(/^---\n([\s\S]*?)\n---/)?.[1] ?? '';
208
+ const bump = frontmatter.match(/['"]?fimo['"]?\s*:\s*(patch|minor|major)/)?.[1];
209
+ if (bump && (!maxBump || BUMP_RANK[bump] > BUMP_RANK[maxBump])) {
210
+ maxBump = bump;
211
+ }
212
+ }
213
+
214
+ if (!maxBump) {
215
+ return baseVersion;
216
+ }
217
+ const [major, minor, patch] = baseVersion.split('-')[0].split('.').map(Number);
218
+ if (maxBump === 'major') {
219
+ return `${major + 1}.0.0`;
220
+ }
221
+ if (maxBump === 'minor') {
222
+ return `${major}.${minor + 1}.0`;
223
+ }
224
+ return `${major}.${minor}.${patch + 1}`;
225
+ }
@@ -0,0 +1,147 @@
1
+ import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
2
+ import { tmpdir } from 'node:os';
3
+ import { join } from 'node:path';
4
+
5
+ import { afterEach, describe, expect, it } from 'vitest';
6
+
7
+ import {
8
+ computePublishVersion,
9
+ nextPrereleaseCounter,
10
+ nextVersionFromChangesets,
11
+ parsePublishedVersions,
12
+ // @ts-expect-error plain mjs module without types
13
+ } from './release-core.mjs';
14
+
15
+ const stagingChannel = { prerelease: true, distTag: 'staging' };
16
+ const latestChannel = { prerelease: false, distTag: 'latest' };
17
+
18
+ describe('computePublishVersion', () => {
19
+ it('returns the base version verbatim for stable channels', () => {
20
+ expect(computePublishVersion('0.3.3', latestChannel, { runId: '7' })).toBe('0.3.3');
21
+ });
22
+
23
+ it('synthesizes a prerelease version from the run id', () => {
24
+ expect(computePublishVersion('0.3.3', stagingChannel, { runId: '26' })).toBe('0.3.3-staging.26');
25
+ });
26
+
27
+ it('strips an existing prerelease suffix before synthesizing', () => {
28
+ expect(computePublishVersion('0.3.3-staging.9', stagingChannel, { runId: '26' })).toBe('0.3.3-staging.26');
29
+ });
30
+
31
+ it('counts per base version when published versions are provided', () => {
32
+ const existingVersions = ['0.3.4', '0.3.5-staging.1', '0.3.5-staging.2'];
33
+ expect(computePublishVersion('0.3.5', stagingChannel, { runId: '30', existingVersions })).toBe('0.3.5-staging.3');
34
+ });
35
+
36
+ it('starts at 1 for a base with no published prereleases', () => {
37
+ const existingVersions = ['0.3.4', '0.3.4-staging.26', '0.3.4-staging.27'];
38
+ expect(computePublishVersion('0.3.5', stagingChannel, { runId: '30', existingVersions })).toBe('0.3.5-staging.1');
39
+ });
40
+ });
41
+
42
+ describe('parsePublishedVersions', () => {
43
+ it('passes through the npm <= 11 array-of-strings shape', () => {
44
+ expect(parsePublishedVersions('["0.3.4", "0.3.5-staging.1"]')).toEqual(['0.3.4', '0.3.5-staging.1']);
45
+ });
46
+
47
+ it('wraps the npm <= 11 bare string returned for a single published version', () => {
48
+ expect(parsePublishedVersions('"0.0.0"')).toEqual(['0.0.0']);
49
+ });
50
+
51
+ it('unwraps the npm 12 shape (--json always returns an array)', () => {
52
+ expect(parsePublishedVersions('[["0.3.4", "0.3.5-staging.1", "0.3.5"]]')).toEqual([
53
+ '0.3.4',
54
+ '0.3.5-staging.1',
55
+ '0.3.5',
56
+ ]);
57
+ });
58
+
59
+ it('returns null for unparseable output', () => {
60
+ expect(parsePublishedVersions('')).toBeNull();
61
+ expect(parsePublishedVersions('npm ERR! something')).toBeNull();
62
+ });
63
+
64
+ it('returns null when nothing version-shaped survives (error envelopes, empty lists)', () => {
65
+ expect(parsePublishedVersions('{"error":{"code":"E401"}}')).toBeNull();
66
+ expect(parsePublishedVersions('[]')).toBeNull();
67
+ expect(parsePublishedVersions('[{"error":{"code":"E404"}}]')).toBeNull();
68
+ expect(parsePublishedVersions('null')).toBeNull();
69
+ });
70
+ });
71
+
72
+ describe('nextPrereleaseCounter', () => {
73
+ it('returns 1 when nothing matches the base + tag', () => {
74
+ expect(nextPrereleaseCounter([], '0.3.5', 'staging')).toBe(1);
75
+ expect(nextPrereleaseCounter(['0.3.5', '0.3.5-experimental.4'], '0.3.5', 'staging')).toBe(1);
76
+ });
77
+
78
+ it('continues past the highest published counter for the base', () => {
79
+ const versions = ['0.3.4-staging.26', '0.3.4-staging.27', '0.3.3-staging.25'];
80
+ expect(nextPrereleaseCounter(versions, '0.3.4', 'staging')).toBe(28);
81
+ });
82
+
83
+ it('does not confuse prefix-sharing bases (0.3.4 vs 0.3.40)', () => {
84
+ expect(nextPrereleaseCounter(['0.3.40-staging.9'], '0.3.4', 'staging')).toBe(1);
85
+ });
86
+
87
+ it('ignores non-integer counters (timestamps still count, garbage does not)', () => {
88
+ expect(nextPrereleaseCounter(['0.3.4-staging.abc', '0.3.4-staging.2.5'], '0.3.4', 'staging')).toBe(1);
89
+ expect(nextPrereleaseCounter(['0.3.3-experimental.1783410168478'], '0.3.3', 'experimental')).toBe(1783410168479);
90
+ });
91
+ });
92
+
93
+ describe('nextVersionFromChangesets', () => {
94
+ let dir: string;
95
+
96
+ afterEach(() => {
97
+ if (dir) {
98
+ rmSync(dir, { recursive: true, force: true });
99
+ }
100
+ });
101
+
102
+ function changesetDir(files: Record<string, string>): string {
103
+ dir = mkdtempSync(join(tmpdir(), 'changesets-'));
104
+ writeFileSync(join(dir, 'README.md'), '# Changesets\n');
105
+ for (const [name, frontmatter] of Object.entries(files)) {
106
+ writeFileSync(join(dir, name), `---\n${frontmatter}\n---\n\nsummary\n`);
107
+ }
108
+ return dir;
109
+ }
110
+
111
+ it('returns the base when the directory does not exist', () => {
112
+ expect(nextVersionFromChangesets('0.3.3', '/nonexistent/.changeset')).toBe('0.3.3');
113
+ });
114
+
115
+ it('returns the base when no changesets are pending', () => {
116
+ expect(nextVersionFromChangesets('0.3.3', changesetDir({}))).toBe('0.3.3');
117
+ });
118
+
119
+ it('applies a patch bump for pending patch changesets', () => {
120
+ const d = changesetDir({ 'a.md': "'fimo': patch" });
121
+ expect(nextVersionFromChangesets('0.3.3', d)).toBe('0.3.4');
122
+ });
123
+
124
+ it('takes the max bump across pending changesets', () => {
125
+ const d = changesetDir({
126
+ 'a.md': "'fimo': patch",
127
+ 'b.md': "'fimo': minor",
128
+ 'c.md': "'fimo': patch",
129
+ });
130
+ expect(nextVersionFromChangesets('0.3.3', d)).toBe('0.4.0');
131
+ });
132
+
133
+ it('handles major bumps and double-quoted package names', () => {
134
+ const d = changesetDir({ 'a.md': '"fimo": major' });
135
+ expect(nextVersionFromChangesets('0.3.3', d)).toBe('1.0.0');
136
+ });
137
+
138
+ it('ignores changesets for other packages', () => {
139
+ const d = changesetDir({ 'a.md': "'@fimo/fimovm': minor" });
140
+ expect(nextVersionFromChangesets('0.3.3', d)).toBe('0.3.3');
141
+ });
142
+
143
+ it('ignores an existing prerelease suffix on the base', () => {
144
+ const d = changesetDir({ 'a.md': "'fimo': patch" });
145
+ expect(nextVersionFromChangesets('0.3.3-staging.9', d)).toBe('0.3.4');
146
+ });
147
+ });