opkg 0.9.0 → 0.9.2

package/packages/core/dist/utils/tarball.d.ts

@@ -0,0 +1,30 @@
+import { PackageFile, Package } from '../types/index.js';
+/**
+ * Tarball utilities for package packaging and extraction
+ */
+export interface TarballInfo {
+    buffer: Buffer;
+    size: number;
+    checksum: string;
+}
+export interface ExtractedPackage {
+    files: PackageFile[];
+    checksum: string;
+}
+/**
+ * Create a tarball from package files
+ */
+export declare function createTarballFromPackage(pkg: Package): Promise<TarballInfo>;
+/**
+ * Extract package files from tarball buffer
+ */
+export declare function extractPackageFromTarball(tarballBuffer: Buffer, expectedChecksum?: string): Promise<ExtractedPackage>;
+/**
+ * Create FormData for multipart upload
+ */
+export declare function createFormDataForUpload(packageName: string, version: string | undefined, tarballInfo: TarballInfo): FormData;
+/**
+ * Verify tarball integrity
+ */
+export declare function verifyTarballIntegrity(buffer: Buffer, expectedSize?: number, expectedChecksum?: string): boolean;
+//# sourceMappingURL=tarball.d.ts.map

package/packages/core/dist/utils/tarball.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tarball.d.ts","sourceRoot":"","sources":["../../src/utils/tarball.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAMzD;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAuDjF;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAsG3B;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,WAAW,EAAE,WAAW,GACvB,QAAQ,CAeV;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CA4BT"}

package/packages/core/dist/utils/tarball.js

@@ -0,0 +1,200 @@
+import * as tar from 'tar';
+import { createHash } from 'crypto';
+import { unlink, readdir, stat, readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { tmpdir } from 'os';
+import { logger } from './logger.js';
+import { ValidationError } from './errors.js';
+import { writeTextFile, readTextFile, ensureDir, exists } from './fs.js';
+import { UNVERSIONED, FILE_PATTERNS } from '../constants/index.js';
+/**
+ * Create a tarball from package files
+ */
+export async function createTarballFromPackage(pkg) {
+    logger.debug(`Creating tarball for package: ${pkg.metadata.name}@${pkg.metadata.version}`);
+    const tempDir = join(tmpdir(), `openpackage-tarball-${Date.now()}`);
+    const tarballPath = join(tempDir, 'package.tar.gz');
+    try {
+        // Create temp directory
+        await ensureDir(tempDir);
+        // Write package files to temp directory
+        for (const file of pkg.files) {
+            const filePath = join(tempDir, file.path);
+            await ensureDir(join(filePath, '..'));
+            await writeTextFile(filePath, file.content, file.encoding || 'utf8');
+        }
+        // Create tarball
+        await tar.create({
+            gzip: true,
+            file: tarballPath,
+            cwd: tempDir
+        }, pkg.files.map(f => f.path));
+        // Read tarball into buffer
+        const tarballBuffer = await readFile(tarballPath);
+        // Calculate checksum
+        const checksum = createHash('sha256').update(tarballBuffer).digest('hex');
+        logger.debug(`Tarball created: ${tarballBuffer.length} bytes, checksum: ${checksum}`);
+        return {
+            buffer: tarballBuffer,
+            size: tarballBuffer.length,
+            checksum
+        };
+    }
+    catch (error) {
+        logger.error('Failed to create tarball', { error, packageName: pkg.metadata.name });
+        throw new ValidationError(`Failed to create tarball: ${error}`);
+    }
+    finally {
+        // Clean up temp directory
+        try {
+            if (await exists(tarballPath)) {
+                await unlink(tarballPath);
+            }
+            // Note: We're not removing the temp dir itself as it may have subdirectories
+            // The OS temp cleanup will handle this
+        }
+        catch (cleanupError) {
+            logger.warn('Failed to clean up temp files', { cleanupError });
+        }
+    }
+}
+/**
+ * Extract package files from tarball buffer
+ */
+export async function extractPackageFromTarball(tarballBuffer, expectedChecksum) {
+    logger.debug(`Extracting package from tarball (${tarballBuffer.length} bytes)`);
+    const tempDir = join(tmpdir(), `openpackage-extract-${Date.now()}`);
+    const isGzipBuffer = (buffer) => {
+        // gzip magic header: 1f 8b
+        return buffer.length >= 2 && buffer[0] === 0x1f && buffer[1] === 0x8b;
+    };
+    const previewBufferAsText = (buffer, maxBytes = 200) => {
+        const slice = buffer.subarray(0, Math.min(maxBytes, buffer.length));
+        // Replace control characters to keep logs readable
+        return slice
+            .toString('utf8')
+            .replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, '�');
+    };
+    const isGzip = isGzipBuffer(tarballBuffer);
+    const tarballPath = join(tempDir, isGzip ? 'package.tar.gz' : 'package.tar');
+    try {
+        // Verify checksum if provided
+        const actualChecksum = createHash('sha256').update(tarballBuffer).digest('hex');
+        if (expectedChecksum && actualChecksum !== expectedChecksum) {
+            throw new ValidationError(`Tarball checksum mismatch. Expected: ${expectedChecksum}, Got: ${actualChecksum}`);
+        }
+        // Create temp directory and write tarball
+        await ensureDir(tempDir);
+        await writeFile(tarballPath, tarballBuffer);
+        // Extract tarball
+        await tar.extract({
+            file: tarballPath,
+            cwd: tempDir
+        });
+        // Read extracted files
+        const files = [];
+        const extractFiles = async (dir, basePath = '') => {
+            const entries = await readdir(dir);
+            for (const entry of entries) {
+                const fullPath = join(dir, entry);
+                const relativePath = basePath ? join(basePath, entry) : entry;
+                const stats = await stat(fullPath);
+                if (stats.isFile()) {
+                    const content = await readTextFile(fullPath);
+                    files.push({
+                        path: relativePath,
+                        content,
+                        encoding: 'utf8'
+                    });
+                }
+                else if (stats.isDirectory()) {
+                    await extractFiles(fullPath, relativePath);
+                }
+            }
+        };
+        await extractFiles(tempDir);
+        // Remove the tarball file itself from the list
+        const filteredFiles = files.filter(f => f.path !== 'package.tar.gz' && f.path !== 'package.tar');
+        logger.debug(`Extracted ${filteredFiles.length} files from tarball`);
+        return {
+            files: filteredFiles,
+            checksum: actualChecksum
+        };
+    }
+    catch (error) {
+        const hint = (() => {
+            // If we didn't get gzip bytes, the first bytes are often informative (JSON/XML)
+            if (isGzip) {
+                return undefined;
+            }
+            const preview = previewBufferAsText(tarballBuffer);
+            const trimmed = preview.trimStart();
+            if (trimmed.startsWith('{') || trimmed.startsWith('[') || trimmed.startsWith('<')) {
+                return `Downloaded payload does not look like a tarball (starts with: '${trimmed.slice(0, 60)}')`;
+            }
+            return `Downloaded payload does not look gzip-compressed (first bytes: '${preview.slice(0, 60)}')`;
+        })();
+        logger.error('Failed to extract tarball', { error, isGzip, hint });
+        const baseMessage = error instanceof Error ? error.message : String(error);
+        throw new ValidationError(hint ? `${baseMessage}. ${hint}` : `Failed to extract tarball: ${baseMessage}`);
+    }
+    finally {
+        // Clean up temp files
+        try {
+            if (await exists(tarballPath)) {
+                await unlink(tarballPath);
+            }
+        }
+        catch (cleanupError) {
+            logger.warn('Failed to clean up temp files', { cleanupError });
+        }
+    }
+}
+/**
+ * Create FormData for multipart upload
+ */
+export function createFormDataForUpload(packageName, version, tarballInfo) {
+    const formData = new FormData();
+    // Add form fields
+    formData.append('name', packageName);
+    if (version) {
+        formData.append('version', version);
+    }
+    // Add tarball file
+    const blob = new Blob([tarballInfo.buffer], { type: 'application/gzip' });
+    const filename = version ? `${packageName}-${version}${FILE_PATTERNS.TGZ_FILES}` : `${packageName}-${UNVERSIONED}${FILE_PATTERNS.TGZ_FILES}`;
+    formData.append('file', blob, filename);
+    return formData;
+}
+/**
+ * Verify tarball integrity
+ */
+export function verifyTarballIntegrity(buffer, expectedSize, expectedChecksum) {
+    try {
+        // Check size
+        if (expectedSize && buffer.length !== expectedSize) {
+            logger.warn('Tarball size mismatch', {
+                expected: expectedSize,
+                actual: buffer.length
+            });
+            return false;
+        }
+        // Check checksum
+        if (expectedChecksum) {
+            const actualChecksum = createHash('sha256').update(buffer).digest('hex');
+            if (actualChecksum !== expectedChecksum) {
+                logger.warn('Tarball checksum mismatch', {
+                    expected: expectedChecksum,
+                    actual: actualChecksum
+                });
+                return false;
+            }
+        }
+        return true;
+    }
+    catch (error) {
+        logger.error('Tarball integrity check failed', { error });
+        return false;
+    }
+}
+//# sourceMappingURL=tarball.js.map

package/packages/core/dist/utils/tarball.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tarball.js","sourceRoot":"","sources":["../../src/utils/tarball.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAiBnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAY;IACzD,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QAEzB,wCAAwC;QACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAG,IAAI,CAAC,QAA2B,IAAI,MAAM,CAAC,CAAC;QAC3F,CAAC;QAED,iBAAiB;QACjB,MAAM,GAAG,CAAC,MAAM,CACd;YACE,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,OAAO;SACb,EACD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC3B,CAAC;QAEF,2BAA2B;QAC3B,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAElD,qBAAqB;QACrB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE1E,MAAM,CAAC,KAAK,CAAC,oBAAoB,aAAa,CAAC,MAAM,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAEtF,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,aAAa,CAAC,MAAM;YAC1B,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,0BAA0B;QAC1B,IAAI,CAAC;YACH,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;YACD,6EAA6E;YAC7E,uCAAuC;QACzC,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,aAAqB,EACrB,gBAAyB;IAEzB,MAAM,CAAC,KAAK,CAAC,oCAAoC,aAAa,CAAC,MAAM,SAAS,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAEpE,MAAM,YAAY,GAAG,CAAC,MAAc,EAAW,EAAE;QAC/C,2BAA2B;QAC3B,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACxE,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,WAAmB,GAAG,EAAU,EAAE;QAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,mDAAmD;QACnD,OAAO,KAAK;aACT,QAAQ,CAAC,MAAM,CAAC;aAChB,OAAO,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAE7E,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEhF,IAAI,gBAAgB,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CACvB,wCAAwC,gBAAgB,UAAU,cAAc,EAAE,CACnF,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAE5C,kBAAkB;QAClB,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;QAEH,uBAAuB;QACvB,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAE,WAAmB,EAAE,EAAiB,EAAE;YAC/E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAE9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC7C,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,YAAY;wBAClB,OAAO;wBACP,QAAQ,EAAE,MAAM;qBACjB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,MAAM,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAE5B,+CAA+C;QAC/C,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAEjG,MAAM,CAAC,KAAK,CAAC,aAAa,aAAa,CAAC,MAAM,qBAAqB,CAAC,CAAC;QAErE,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,cAAc;SACzB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,gFAAgF;YAChF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClF,OAAO,kEAAkE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YACpG,CAAC;YACD,OAAO,mEAAmE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;QACrG,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;IAC5G,CAAC;YAAS,CAAC;QACT,sBAAsB;QACtB,IAAI,CAAC;YACH,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,OAA2B,EAC3B,WAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAEhC,kBAAkB;IAClB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;IACnB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAC7I,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,YAAqB,EACrB,gBAAyB;IAEzB,IAAI,CAAC;QACH,aAAa;QACb,IAAI,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB;QACjB,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzE,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBACvC,QAAQ,EAAE,gBAAgB;oBAC1B,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/packages/core/dist/utils/validation/index.d.ts

@@ -0,0 +1,4 @@
+export * from './version.js';
+export * from './manifest.js';
+export * from './package-files.js';
+//# sourceMappingURL=index.d.ts.map

package/packages/core/dist/utils/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/validation/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC"}

package/packages/core/dist/utils/validation/index.js

@@ -0,0 +1,5 @@
+// Re-export all validation utilities
+export * from './version.js';
+export * from './manifest.js';
+export * from './package-files.js';
+//# sourceMappingURL=index.js.map

package/packages/core/dist/utils/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/validation/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC"}

package/packages/core/dist/utils/validation/manifest.d.ts

@@ -0,0 +1,16 @@
+import type { PackageYml } from '../../types/index.js';
+export interface ManifestValidationOptions {
+    /** Context for error messages */
+    context?: string;
+}
+/**
+ * Check if manifest exists at given path
+ * Throws descriptive error if not found
+ */
+export declare function validateManifestExists(manifestPath: string, options?: ManifestValidationOptions): Promise<void>;
+/**
+ * Load and validate manifest from directory
+ * Returns parsed manifest, throws on errors
+ */
+export declare function loadAndValidateManifest(directory: string, options?: ManifestValidationOptions): Promise<PackageYml>;
+//# sourceMappingURL=manifest.d.ts.map

package/packages/core/dist/utils/validation/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/utils/validation/manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,UAAU,CAAC,CASrB"}

package/packages/core/dist/utils/validation/manifest.js

@@ -0,0 +1,27 @@
+import path from 'path';
+import { FILE_PATTERNS } from '../../constants/index.js';
+import { exists } from '../fs.js';
+import { parsePackageYml } from '../package-yml.js';
+/**
+ * Check if manifest exists at given path
+ * Throws descriptive error if not found
+ */
+export async function validateManifestExists(manifestPath, options = {}) {
+    if (!(await exists(manifestPath))) {
+        const context = options.context || 'current directory';
+        throw new Error(`No ${FILE_PATTERNS.OPENPACKAGE_YML} found in ${context}.\n` +
+            `Run this command from a package root directory or ensure the manifest exists.`);
+    }
+}
+/**
+ * Load and validate manifest from directory
+ * Returns parsed manifest, throws on errors
+ */
+export async function loadAndValidateManifest(directory, options = {}) {
+    const manifestPath = path.join(directory, FILE_PATTERNS.OPENPACKAGE_YML);
+    await validateManifestExists(manifestPath, options);
+    // parsePackageYml already validates name field and dependencies
+    const manifest = await parsePackageYml(manifestPath);
+    return manifest;
+}
+//# sourceMappingURL=manifest.js.map

package/packages/core/dist/utils/validation/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/utils/validation/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAQpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB,EACpB,UAAqC,EAAE;IAEvC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,MAAM,aAAa,CAAC,eAAe,aAAa,OAAO,KAAK;YAC5D,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,UAAqC,EAAE;IAEvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAEzE,MAAM,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAEpD,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IAErD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/packages/core/dist/utils/validation/package-files.d.ts

@@ -0,0 +1,13 @@
+import type { PackageFile } from '../../types/index.js';
+export interface PackageFilesValidationOptions {
+    /** Context for error messages */
+    context?: string;
+    /** Throw error if no files found (default: true) */
+    throwOnEmpty?: boolean;
+}
+/**
+ * Read and validate package files from directory
+ * Throws if no files found (unless throwOnEmpty: false)
+ */
+export declare function validateAndReadPackageFiles(packageRoot: string, options?: PackageFilesValidationOptions): Promise<PackageFile[]>;
+//# sourceMappingURL=package-files.d.ts.map

package/packages/core/dist/utils/validation/package-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-files.d.ts","sourceRoot":"","sources":["../../../src/utils/validation/package-files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,6BAA6B;IAC5C,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,WAAW,EAAE,CAAC,CAWxB"}

package/packages/core/dist/utils/validation/package-files.js

@@ -0,0 +1,15 @@
+import { readPackageFilesForRegistry } from '../package-copy.js';
+/**
+ * Read and validate package files from directory
+ * Throws if no files found (unless throwOnEmpty: false)
+ */
+export async function validateAndReadPackageFiles(packageRoot, options = {}) {
+    const files = await readPackageFilesForRegistry(packageRoot);
+    const throwOnEmpty = options.throwOnEmpty !== false;
+    if (files.length === 0 && throwOnEmpty) {
+        const context = options.context || 'package';
+        throw new Error(`No files found to include in ${context}`);
+    }
+    return files;
+}
+//# sourceMappingURL=package-files.js.map

package/packages/core/dist/utils/validation/package-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-files.js","sourceRoot":"","sources":["../../../src/utils/validation/package-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAUjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,UAAyC,EAAE;IAE3C,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAE7D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IAEpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/packages/core/dist/utils/validation/version.d.ts

@@ -0,0 +1,24 @@
+export interface VersionValidationOptions {
+    /** Reject prerelease versions (e.g., 1.0.0-beta) */
+    rejectPrerelease?: boolean;
+    /** Context for error messages (e.g., "publish", "pack") */
+    context?: string;
+}
+export interface VersionValidationError {
+    code: 'MISSING_VERSION' | 'INVALID_VERSION' | 'PRERELEASE_DISALLOWED';
+    message: string;
+}
+/**
+ * Validate version string against semver rules
+ * Returns error object if invalid, null if valid
+ */
+export declare function validateVersion(version: string | undefined, options?: VersionValidationOptions): VersionValidationError | null;
+/**
+ * Assert version is valid (throws if invalid)
+ */
+export declare function assertValidVersion(version: string | undefined, options?: VersionValidationOptions): asserts version is string;
+/**
+ * Check if version is unversioned (0.0.0)
+ */
+export declare function isUnversionedPackage(version: string | undefined): boolean;
+//# sourceMappingURL=version.d.ts.map

package/packages/core/dist/utils/validation/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/utils/validation/version.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,uBAAuB,CAAC;IACtE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,wBAA6B,GACrC,sBAAsB,GAAG,IAAI,CAuB/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,OAAO,IAAI,MAAM,CAK3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzE"}

package/packages/core/dist/utils/validation/version.js

@@ -0,0 +1,42 @@
+import * as semver from 'semver';
+/**
+ * Validate version string against semver rules
+ * Returns error object if invalid, null if valid
+ */
+export function validateVersion(version, options = {}) {
+    if (!version) {
+        return {
+            code: 'MISSING_VERSION',
+            message: `Version field is required${options.context ? ` for ${options.context}` : ''}`
+        };
+    }
+    if (!semver.valid(version)) {
+        return {
+            code: 'INVALID_VERSION',
+            message: `Invalid version: ${version}. Must be valid semver (e.g., 1.0.0)`
+        };
+    }
+    if (options.rejectPrerelease && semver.prerelease(version)) {
+        return {
+            code: 'PRERELEASE_DISALLOWED',
+            message: `Prerelease versions are not allowed${options.context ? ` for ${options.context}` : ''}: ${version}`
+        };
+    }
+    return null;
+}
+/**
+ * Assert version is valid (throws if invalid)
+ */
+export function assertValidVersion(version, options) {
+    const error = validateVersion(version, options);
+    if (error) {
+        throw new Error(error.message);
+    }
+}
+/**
+ * Check if version is unversioned (0.0.0)
+ */
+export function isUnversionedPackage(version) {
+    return version === '0.0.0';
+}
+//# sourceMappingURL=version.js.map

package/packages/core/dist/utils/validation/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/utils/validation/version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAcjC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,UAAoC,EAAE;IAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,4BAA4B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,oBAAoB,OAAO,sCAAsC;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,sCAAsC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE;SAC9G,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,OAAkC;IAElC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,OAAO,OAAO,KAAK,OAAO,CAAC;AAC7B,CAAC"}

package/packages/core/dist/utils/version-generator.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Version generation utilities for local and WIP versions.
+ */
+export declare const WIP_TIMESTAMP_TOKEN_LENGTH = 6;
+export declare const WORKSPACE_HASH_TOKEN_LENGTH = 8;
+export declare const WIP_WORKSPACE_TAG_LENGTH = 3;
+/**
+ * Extract the stable base (major.minor.patch) portion of a version string.
+ *
+ * - For any valid semver (including pre-releases like "1.2.3-000fz8.a3k"
+ *   or legacy "1.2.3-wip.abc"), this returns "1.2.3".
+ * - For non-semver strings, it returns the portion before the first "-"
+ *   (if any), otherwise the input unchanged.
+ */
+export declare function extractBaseVersion(version: string): string;
+/**
+ * Encode a non-negative integer into a fixed-length base36-like string.
+ * Values that exceed the requested length are truncated from the left (highest order digits).
+ */
+export declare function encodeBase62(value: number, length?: number): string;
+/**
+ * Generate a 6-character base36 timestamp from the provided Date (defaults to now).
+ */
+export declare function generateBase62Timestamp(date?: Date, length?: number): string;
+/**
+ * Create a deterministic hash for the current workspace path.
+ * Returns a lower-case hex slice (default 8 characters).
+ */
+export declare function createWorkspaceHash(inputPath: string, length?: number): string;
+/**
+ * Create the workspace tag used in WIP versions.
+ * Returns a 3-character tag derived from the workspace path hash.
+ * This is the single source of truth for workspace tags used in version strings.
+ */
+export declare function createWorkspaceTag(inputPath: string): string;
+/**
+ * Generate a WIP version string in the canonical S-<t>.<w> form.
+ *
+ * - `stable` is the normalized base stable version (e.g. "1.2.3").
+ * - `workspacePath` is the workspace path; the tag is derived from it.
+ * - `options.now` can be provided for deterministic testing.
+ */
+export declare function generateWipVersion(stable: string, workspacePath: string, options?: {
+    now?: Date;
+}): string;
+export interface ParsedWipVersion {
+    baseStable: string;
+    timestamp: string;
+    workspaceHash: string;
+}
+/**
+ * Parse a WIP version string.
+ *
+ * Supports the S-<t>.<w> scheme: {base}-{timestamp}.{workspaceTag} (e.g. 1.2.3-000fz8.a3k)
+ */
+export declare function parseWipVersion(version: string): ParsedWipVersion | null;
+export declare function extractWorkspaceHashFromVersion(version: string): string | null;
+//# sourceMappingURL=version-generator.d.ts.map

package/packages/core/dist/utils/version-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-generator.d.ts","sourceRoot":"","sources":["../../src/utils/version-generator.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAS1D;AAID;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,MAAmC,GAAG,MAAM,CAsB/F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,GAAE,IAAiB,EACvB,MAAM,GAAE,MAAmC,GAC1C,MAAM,CAGR;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAoC,GAC3C,MAAM,CAUR;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACvB,MAAM,CAOR;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAcxE;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9E"}

package/packages/core/dist/utils/version-generator.js

@@ -0,0 +1,132 @@
+import { createHash } from 'crypto';
+import * as semver from 'semver';
+/**
+ * Version generation utilities for local and WIP versions.
+ */
+export const WIP_TIMESTAMP_TOKEN_LENGTH = 6;
+export const WORKSPACE_HASH_TOKEN_LENGTH = 8;
+// Length of the short workspace tag used in WIP versions (e.g. 3 base36 chars)
+export const WIP_WORKSPACE_TAG_LENGTH = 3;
+/**
+ * Extract the stable base (major.minor.patch) portion of a version string.
+ *
+ * - For any valid semver (including pre-releases like "1.2.3-000fz8.a3k"
+ *   or legacy "1.2.3-wip.abc"), this returns "1.2.3".
+ * - For non-semver strings, it returns the portion before the first "-"
+ *   (if any), otherwise the input unchanged.
+ */
+export function extractBaseVersion(version) {
+    const hyphenIndex = version.indexOf('-');
+    const candidate = hyphenIndex === -1 ? version : version.slice(0, hyphenIndex);
+    const parsed = semver.parse(candidate);
+    if (parsed) {
+        return `${parsed.major}.${parsed.minor}.${parsed.patch}`;
+    }
+    return candidate;
+}
+const TIMESTAMP_ALPHABET = '0123456789abcdefghijklmnopqrstuvwxyz';
+/**
+ * Encode a non-negative integer into a fixed-length base36-like string.
+ * Values that exceed the requested length are truncated from the left (highest order digits).
+ */
+export function encodeBase62(value, length = WIP_TIMESTAMP_TOKEN_LENGTH) {
+    if (!Number.isFinite(value) || value < 0) {
+        value = 0;
+    }
+    const base = TIMESTAMP_ALPHABET.length;
+    let remaining = Math.floor(value);
+    let encoded = '';
+    do {
+        const digit = remaining % base;
+        encoded = `${TIMESTAMP_ALPHABET[digit]}${encoded}`;
+        remaining = Math.floor(remaining / base);
+    } while (remaining > 0);
+    if (encoded.length < length) {
+        encoded = encoded.padStart(length, '0');
+    }
+    else if (encoded.length > length) {
+        encoded = encoded.slice(-length);
+    }
+    return encoded;
+}
+/**
+ * Generate a 6-character base36 timestamp from the provided Date (defaults to now).
+ */
+export function generateBase62Timestamp(date = new Date(), length = WIP_TIMESTAMP_TOKEN_LENGTH) {
+    const seconds = Math.floor(date.getTime() / 1000);
+    return encodeBase62(seconds, length);
+}
+/**
+ * Create a deterministic hash for the current workspace path.
+ * Returns a lower-case hex slice (default 8 characters).
+ */
+export function createWorkspaceHash(inputPath, length = WORKSPACE_HASH_TOKEN_LENGTH) {
+    const normalizedPath = inputPath.replace(/\\/g, '/');
+    const digest = createHash('sha256').update(normalizedPath).digest('hex');
+    if (length <= 0) {
+        return '';
+    }
+    if (digest.length <= length) {
+        return digest.padEnd(length, '0');
+    }
+    return digest.slice(0, length);
+}
+/**
+ * Sanitize a workspace hash string to a fixed length.
+ * Internal helper used for tag generation.
+ */
+function sanitizeWorkspaceHash(hash, length) {
+    const cleaned = (hash || '').toLowerCase().replace(/[^0-9a-z]/g, '');
+    if (cleaned.length === 0) {
+        return ''.padEnd(length, '0');
+    }
+    if (cleaned.length >= length) {
+        return cleaned.slice(0, length);
+    }
+    return `${cleaned}${'0'.repeat(length - cleaned.length)}`;
+}
+/**
+ * Create the workspace tag used in WIP versions.
+ * Returns a 3-character tag derived from the workspace path hash.
+ * This is the single source of truth for workspace tags used in version strings.
+ */
+export function createWorkspaceTag(inputPath) {
+    const workspaceHash = createWorkspaceHash(inputPath);
+    return sanitizeWorkspaceHash(workspaceHash, WIP_WORKSPACE_TAG_LENGTH);
+}
+/**
+ * Generate a WIP version string in the canonical S-<t>.<w> form.
+ *
+ * - `stable` is the normalized base stable version (e.g. "1.2.3").
+ * - `workspacePath` is the workspace path; the tag is derived from it.
+ * - `options.now` can be provided for deterministic testing.
+ */
+export function generateWipVersion(stable, workspacePath, options) {
+    const timestampPart = generateBase62Timestamp(options?.now ?? new Date(), WIP_TIMESTAMP_TOKEN_LENGTH);
+    const hashPart = createWorkspaceTag(workspacePath);
+    return `${stable}-${timestampPart}.${hashPart}`;
+}
+/**
+ * Parse a WIP version string.
+ *
+ * Supports the S-<t>.<w> scheme: {base}-{timestamp}.{workspaceTag} (e.g. 1.2.3-000fz8.a3k)
+ */
+export function parseWipVersion(version) {
+    const parsed = semver.parse(version);
+    if (parsed && parsed.prerelease.length === 2) {
+        const [timestamp, workspaceHash] = parsed.prerelease;
+        if (typeof timestamp === 'string' && typeof workspaceHash === 'string') {
+            return {
+                baseStable: `${parsed.major}.${parsed.minor}.${parsed.patch}`,
+                timestamp,
+                workspaceHash
+            };
+        }
+    }
+    return null;
+}
+export function extractWorkspaceHashFromVersion(version) {
+    const parsed = parseWipVersion(version);
+    return parsed?.workspaceHash ?? null;
+}
+//# sourceMappingURL=version-generator.js.map

package/packages/core/dist/utils/version-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-generator.js","sourceRoot":"","sources":["../../src/utils/version-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;GAEG;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAC7C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAI1C;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAElE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,SAAiB,0BAA0B;IACrF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACvC,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;QAC/B,OAAO,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC;QACnD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3C,CAAC,QAAQ,SAAS,GAAG,CAAC,EAAE;IAExB,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC5B,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACnC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAa,IAAI,IAAI,EAAE,EACvB,SAAiB,0BAA0B;IAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAClD,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,SAAiB,2BAA2B;IAE5C,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,IAAY,EACZ,MAAc;IAEd,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,qBAAqB,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,aAAqB,EACrB,OAAwB;IAExB,MAAM,aAAa,GAAG,uBAAuB,CAC3C,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAC1B,0BAA0B,CAC3B,CAAC;IACF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACnD,OAAO,GAAG,MAAM,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;AAClD,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACvE,OAAO;gBACL,UAAU,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE;gBAC7D,SAAS;gBACT,aAAa;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAEC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAe;IAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,EAAE,aAAa,IAAI,IAAI,CAAC;AACvC,CAAC"}