semver 6.3.1: valid

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify semver.valid in pkg:npm/semver@6.3.1
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:npm/semver@6.3.1
Demonstrate these symbols/APIs:
  - semver.valid
Constraints:
  - executionContext: node
Required runtime conditions:
  - ecosystem: npm
  - language: javascript
  - moduleSystem: cjs
  - packageManager: npm@10.9.8
  - runtime: node@22.23.2

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:04b2375f8ac2cb7383fff834233b85694a070e2914c7a07acdad205c5b4eaf18","constraints":{"executionContext":"node"},"contract":["valid returns normalized version string for valid semantic versions","valid strips build metadata from valid version strings","valid returns null for invalid version strings","valid returns null for non-string inputs","valid supports loose option to sanitize prefixed version strings"],"goal":"verify semver.valid in pkg:npm/semver@6.3.1","kind":"HOW","packages":["pkg:npm/semver@6.3.1"],"schemaVersion":1,"symbols":["semver.valid"]},"contractCommand":["node","test/contract.js"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","executionContext":"node","language":"javascript","libc":"glibc","libcVersion":"2.39","moduleSystem":"cjs","os":"linux","osVersionBucket":"24","packageManager":"npm","packageManagerVersion":"10.9.8","runtime":"node","runtimeVersion":"22.23.2","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/semver@6.3.1"],"schemaVersion":1,"subject":"pkg:npm/semver@6.3.1","symbols":["semver.valid"],"verifierAdapter":"node-typescript@1"}

const semver = require('semver');

/**
 * Validate a version string. Returns the normalized version or null if invalid.
 * Note that semver.valid in semver@6.3.1 strips build metadata.
 *
 * @param {string} version - The version string to validate.
 * @param {boolean|object} [options] - Optional loose mode flag or options object.
 * @returns {string|null} The normalized version string, or null if invalid.
 */
function validateVersion(version, options) {
  return semver.valid(version, options);
}

module.exports = {
  validateVersion,
};

{
  "name": "sample-semver-valid",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sample-semver-valid",
      "version": "1.0.0",
      "dependencies": {
        "semver": "6.3.1"
      }
    },
    "node_modules/semver": {
      "version": "6.3.1",
      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
      "license": "ISC",
      "bin": {
        "semver": "bin/semver.js"
      }
    }
  }
}

{
  "name": "sample-semver-valid",
  "version": "1.0.0",
  "private": true,
  "description": "Verify semver.valid in pkg:npm/semver@6.3.1",
  "main": "index.js",
  "scripts": {
    "test": "node test/contract.js"
  },
  "dependencies": {
    "semver": "6.3.1"
  }
}

{
  "schemaVersion": 1,
  "goal": "verify semver.valid in pkg:npm/semver@6.3.1",
  "kind": "HOW",
  "packages": [
    "pkg:npm/semver@6.3.1"
  ],
  "symbols": [
    "semver.valid"
  ],
  "constraints": {
    "executionContext": "node"
  },
  "runtimeConditions": {
    "ecosystem": "npm",
    "language": "javascript",
    "moduleSystem": "cjs",
    "packageManager": "npm@10.9.8",
    "runtime": "node@22.23.2"
  }
}

const assert = require('node:assert');
const semver = require('semver');
const { validateVersion } = require('../index.js');

// 1. valid returns normalized version string for valid semantic versions
{
  assert.strictEqual(validateVersion('1.2.3'), '1.2.3');
  assert.strictEqual(validateVersion('v1.2.3'), '1.2.3');
  assert.strictEqual(validateVersion('2.0.0-rc.1'), '2.0.0-rc.1');
  assert.strictEqual(semver.valid('1.2.3'), '1.2.3');
}

// 2. valid strips build metadata from valid version strings
{
  assert.strictEqual(validateVersion('1.0.0-alpha.1+build.123'), '1.0.0-alpha.1');
  assert.strictEqual(validateVersion('1.0.0+20130313144700'), '1.0.0');
}

// 3. valid returns null for invalid version strings
{
  assert.strictEqual(validateVersion('invalid-version'), null);
  assert.strictEqual(validateVersion('1.2.3.4'), null);
  assert.strictEqual(validateVersion(''), null);
}

// 4. valid returns null for non-string inputs
{
  assert.strictEqual(validateVersion(null), null);
  assert.strictEqual(validateVersion(undefined), null);
  assert.strictEqual(validateVersion(123), null);
}

// 5. valid supports loose option to sanitize prefixed version strings
{
  assert.strictEqual(validateVersion('=v1.2.3'), null);
  assert.strictEqual(validateVersion('=v1.2.3', { loose: true }), '1.2.3');
  assert.strictEqual(validateVersion('=v1.2.3', true), '1.2.3');
}