@_linked/cli 1.41.0 → 1.42.0

package/lib/esm/localize/list.js

@@ -0,0 +1,174 @@
+/**
+ * `--list` -- read the SYMLINKS, then reconcile against the manifest.
+ *
+ * The manifest records INTENT; the symlink is TRUTH. They can disagree -- most
+ * commonly because `npm ci` deleted `node_modules` and exited 0 -- so this
+ * reads the links first and reports the disagreement rather than assuming.
+ * The four states are distinguished deliberately: both of the silent failures
+ * this tool was built to end were disagreements between intent and truth.
+ *
+ * It also flags a directory in the checkout directory (`packages-local/`) that
+ * nothing records and nothing links: every checkout there is meant to be
+ * localized, and one that is not loads nobody's code while looking as if it
+ * did.
+ *
+ * Never writes. Exits 0, unless `--check` and something recorded is not
+ * actually linked.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { MANIFEST_FILENAME, readManifest } from './manifest.js';
+import { isInside, linkTarget, readJson, scanLinks } from './fsops.js';
+import { reportError } from './localize.js';
+/** @returns {{rows: object[], notLinked: number}} */
+export function collect(deps) {
+    const manifest = readManifest(deps.appRoot, deps);
+    const dir = path.join(deps.appRoot, manifest.dir);
+    const rows = [];
+    for (const [name, entry] of Object.entries(manifest.entries)) {
+        const checkout = path.join(deps.appRoot, entry.path);
+        const target = linkTarget(deps.appRoot, name);
+        if (target && isInside(target, dir)) {
+            rows.push({
+                name,
+                state: 'linked',
+                path: entry.path,
+                branch: entry.branch,
+                note: '',
+            });
+        }
+        else if (!fs.existsSync(checkout)) {
+            // Recorded, but nothing on disk. `localize <name>` re-clones it when the
+            // entry has a repo or the package is published; otherwise it is restored by hand.
+            rows.push({
+                name,
+                state: 'checkout-missing',
+                path: entry.path,
+                branch: '—',
+                note: 'CHECKOUT MISSING',
+            });
+        }
+        else {
+            // Intent and checkout present, symlink gone. This is what `npm ci`
+            // leaves behind, and it is the state that costs hours.
+            rows.push({
+                name,
+                state: 'not-linked',
+                path: entry.path,
+                branch: entry.branch,
+                note: 'checkout present',
+            });
+        }
+    }
+    for (const m of manifest.malformed) {
+        rows.push({
+            name: m.name,
+            state: 'malformed',
+            path: '—',
+            branch: '—',
+            note: `malformed entry (${m.reason})`,
+        });
+    }
+    // A symlink out of node_modules that the manifest does not know about.
+    // Reported, never touched.
+    const untrackedTargets = [];
+    for (const { name, target } of scanLinks(deps.appRoot)) {
+        if (manifest.entries[name])
+            continue;
+        untrackedTargets.push(target);
+        rows.push({
+            name,
+            state: 'untracked',
+            path: path.relative(deps.appRoot, target),
+            branch: '—',
+            note: `not in ${MANIFEST_FILENAME}`,
+        });
+    }
+    // A directory in the checkout directory with no record (and no link, which
+    // the row above already reports).
+    const recorded = Object.values(manifest.entries).map((e) => real(path.join(deps.appRoot, e.path)));
+    for (const sub of directoriesIn(dir)) {
+        const abs = real(path.join(dir, sub));
+        if (recorded.some((r) => r === abs || isInside(r, abs)))
+            continue;
+        if (untrackedTargets.some((t) => t === abs || isInside(t, abs)))
+            continue;
+        const pkg = readJson(path.join(abs, 'package.json'));
+        rows.push({
+            name: typeof (pkg === null || pkg === void 0 ? void 0 : pkg.name) === 'string' ? pkg.name : '—',
+            state: 'unrecorded',
+            path: path.join(manifest.dir, sub),
+            branch: '—',
+            note: `directory not in ${MANIFEST_FILENAME}`,
+        });
+    }
+    const notLinked = rows.filter((r) => r.state === 'not-linked' || r.state === 'checkout-missing').length;
+    return { rows, notLinked };
+}
+export function list(opts, deps) {
+    let result;
+    try {
+        result = collect(deps);
+    }
+    catch (e) {
+        return reportError(e, deps);
+    }
+    const { rows, notLinked } = result;
+    if (!rows.length)
+        return 0; // nothing localized, nothing to say
+    const pad = (n, s) => s.padEnd(n);
+    const nameW = Math.max(...rows.map((r) => r.name.length)) + 2;
+    const pathW = Math.max(...rows.map((r) => r.path.length)) + 2;
+    for (const r of rows) {
+        const label = r.state === 'linked' || r.state === 'untracked'
+            ? 'linked'
+            : r.state === 'unrecorded'
+                ? 'UNRECORDED'
+                : 'NOT LINKED';
+        deps.log(pad(nameW, r.name) +
+            pad(12, label) +
+            pad(pathW, r.path) +
+            pad(11, r.branch) +
+            r.note);
+    }
+    const count = (s) => rows.filter((r) => r.state === s).length;
+    const parts = [`${count('linked')} linked`, `${notLinked} not linked`];
+    if (count('untracked'))
+        parts.push(`${count('untracked')} untracked link`);
+    if (count('malformed'))
+        parts.push(`${count('malformed')} malformed entry`);
+    if (count('unrecorded'))
+        parts.push(`${count('unrecorded')} unrecorded ${count('unrecorded') === 1 ? 'directory' : 'directories'}`);
+    deps.log('');
+    deps.log(parts.join(' · '));
+    return opts.check && notLinked > 0 ? 1 : 0;
+}
+/** The (non-hidden) directories directly in `dir`, following links; none when it is absent. */
+function directoriesIn(dir) {
+    let names;
+    try {
+        names = fs.readdirSync(dir);
+    }
+    catch (_a) {
+        return [];
+    }
+    return names.filter((n) => {
+        if (n.startsWith('.'))
+            return false;
+        try {
+            return fs.statSync(path.join(dir, n)).isDirectory();
+        }
+        catch (_a) {
+            return false;
+        }
+    });
+}
+function real(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch (_a) {
+        return p;
+    }
+}
+//# sourceMappingURL=list.js.map

package/lib/esm/localize/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/localize/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAC,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AACrE,OAAO,EAAC,WAAW,EAAC,MAAM,eAAe,CAAC;AAkB1C,qDAAqD;AACrD,MAAM,UAAU,OAAO,CAAC,IAAU;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,IAAI,GAAc,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE9C,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI;gBACJ,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,yEAAyE;YACzE,kFAAkF;YAClF,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI;gBACJ,KAAK,EAAE,kBAAkB;gBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,kBAAkB;aACzB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI;gBACJ,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,kBAAkB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,oBAAoB,CAAC,CAAC,MAAM,GAAG;SACtC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,2BAA2B;IAC3B,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,EAAC,IAAI,EAAE,MAAM,EAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC;YACR,IAAI;YACJ,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;YACzC,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,UAAU,iBAAiB,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CACtC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QAClE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,OAAO,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;YACpD,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;YAClC,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,oBAAoB,iBAAiB,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,kBAAkB,CAClE,CAAC,MAAM,CAAC;IACT,OAAO,EAAC,IAAI,EAAE,SAAS,EAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAuB,EAAE,IAAU;IACtD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,EAAC,IAAI,EAAE,SAAS,EAAC,GAAG,MAAM,CAAC;IAEjC,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC,oCAAoC;IAEhE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GACT,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;YAC7C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY;gBACxB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,YAAY,CAAC;QACrB,IAAI,CAAC,GAAG,CACN,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;YAChB,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;YACd,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;YAClB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,CAAC,CAAC,IAAI,CACT,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,SAAS,aAAa,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,YAAY,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAC/F,CAAC;IACJ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5B,OAAO,IAAI,CAAC,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC","sourcesContent":["/**\n * `--list` -- read the SYMLINKS, then reconcile against the manifest.\n *\n * The manifest records INTENT; the symlink is TRUTH. They can disagree -- most\n * commonly because `npm ci` deleted `node_modules` and exited 0 -- so this\n * reads the links first and reports the disagreement rather than assuming.\n * The four states are distinguished deliberately: both of the silent failures\n * this tool was built to end were disagreements between intent and truth.\n *\n * It also flags a directory in the checkout directory (`packages-local/`) that\n * nothing records and nothing links: every checkout there is meant to be\n * localized, and one that is not loads nobody's code while looking as if it\n * did.\n *\n * Never writes. Exits 0, unless `--check` and something recorded is not\n * actually linked.\n */\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport {MANIFEST_FILENAME, readManifest} from './manifest.js';\nimport {isInside, linkTarget, readJson, scanLinks} from './fsops.js';\nimport {reportError} from './localize.js';\nimport type {Deps} from './run.js';\n\n/** One row of `--list`: a recorded package, or a link the manifest does not know. */\nexport interface ListRow {\n  name: string;\n  state:\n    | 'linked'\n    | 'checkout-missing'\n    | 'not-linked'\n    | 'malformed'\n    | 'untracked'\n    | 'unrecorded';\n  path: string;\n  branch: string;\n  note: string;\n}\n\n/** @returns {{rows: object[], notLinked: number}} */\nexport function collect(deps: Deps): {rows: ListRow[]; notLinked: number} {\n  const manifest = readManifest(deps.appRoot, deps);\n  const dir = path.join(deps.appRoot, manifest.dir);\n  const rows: ListRow[] = [];\n\n  for (const [name, entry] of Object.entries(manifest.entries)) {\n    const checkout = path.join(deps.appRoot, entry.path);\n    const target = linkTarget(deps.appRoot, name);\n\n    if (target && isInside(target, dir)) {\n      rows.push({\n        name,\n        state: 'linked',\n        path: entry.path,\n        branch: entry.branch,\n        note: '',\n      });\n    } else if (!fs.existsSync(checkout)) {\n      // Recorded, but nothing on disk. `localize <name>` re-clones it when the\n      // entry has a repo or the package is published; otherwise it is restored by hand.\n      rows.push({\n        name,\n        state: 'checkout-missing',\n        path: entry.path,\n        branch: '—',\n        note: 'CHECKOUT MISSING',\n      });\n    } else {\n      // Intent and checkout present, symlink gone. This is what `npm ci`\n      // leaves behind, and it is the state that costs hours.\n      rows.push({\n        name,\n        state: 'not-linked',\n        path: entry.path,\n        branch: entry.branch,\n        note: 'checkout present',\n      });\n    }\n  }\n\n  for (const m of manifest.malformed) {\n    rows.push({\n      name: m.name,\n      state: 'malformed',\n      path: '—',\n      branch: '—',\n      note: `malformed entry (${m.reason})`,\n    });\n  }\n\n  // A symlink out of node_modules that the manifest does not know about.\n  // Reported, never touched.\n  const untrackedTargets: string[] = [];\n  for (const {name, target} of scanLinks(deps.appRoot)) {\n    if (manifest.entries[name]) continue;\n    untrackedTargets.push(target);\n    rows.push({\n      name,\n      state: 'untracked',\n      path: path.relative(deps.appRoot, target),\n      branch: '—',\n      note: `not in ${MANIFEST_FILENAME}`,\n    });\n  }\n\n  // A directory in the checkout directory with no record (and no link, which\n  // the row above already reports).\n  const recorded = Object.values(manifest.entries).map((e) =>\n    real(path.join(deps.appRoot, e.path)),\n  );\n  for (const sub of directoriesIn(dir)) {\n    const abs = real(path.join(dir, sub));\n    if (recorded.some((r) => r === abs || isInside(r, abs))) continue;\n    if (untrackedTargets.some((t) => t === abs || isInside(t, abs))) continue;\n    const pkg = readJson(path.join(abs, 'package.json'));\n    rows.push({\n      name: typeof pkg?.name === 'string' ? pkg.name : '—',\n      state: 'unrecorded',\n      path: path.join(manifest.dir, sub),\n      branch: '—',\n      note: `directory not in ${MANIFEST_FILENAME}`,\n    });\n  }\n\n  const notLinked = rows.filter(\n    (r) => r.state === 'not-linked' || r.state === 'checkout-missing',\n  ).length;\n  return {rows, notLinked};\n}\n\nexport function list(opts: {check?: boolean}, deps: Deps): number {\n  let result;\n  try {\n    result = collect(deps);\n  } catch (e) {\n    return reportError(e, deps);\n  }\n  const {rows, notLinked} = result;\n\n  if (!rows.length) return 0; // nothing localized, nothing to say\n\n  const pad = (n, s) => s.padEnd(n);\n  const nameW = Math.max(...rows.map((r) => r.name.length)) + 2;\n  const pathW = Math.max(...rows.map((r) => r.path.length)) + 2;\n  for (const r of rows) {\n    const label =\n      r.state === 'linked' || r.state === 'untracked'\n        ? 'linked'\n        : r.state === 'unrecorded'\n          ? 'UNRECORDED'\n          : 'NOT LINKED';\n    deps.log(\n      pad(nameW, r.name) +\n        pad(12, label) +\n        pad(pathW, r.path) +\n        pad(11, r.branch) +\n        r.note,\n    );\n  }\n\n  const count = (s) => rows.filter((r) => r.state === s).length;\n  const parts = [`${count('linked')} linked`, `${notLinked} not linked`];\n  if (count('untracked')) parts.push(`${count('untracked')} untracked link`);\n  if (count('malformed')) parts.push(`${count('malformed')} malformed entry`);\n  if (count('unrecorded'))\n    parts.push(\n      `${count('unrecorded')} unrecorded ${count('unrecorded') === 1 ? 'directory' : 'directories'}`,\n    );\n  deps.log('');\n  deps.log(parts.join(' · '));\n\n  return opts.check && notLinked > 0 ? 1 : 0;\n}\n\n/** The (non-hidden) directories directly in `dir`, following links; none when it is absent. */\nfunction directoriesIn(dir: string): string[] {\n  let names: string[];\n  try {\n    names = fs.readdirSync(dir);\n  } catch {\n    return [];\n  }\n  return names.filter((n) => {\n    if (n.startsWith('.')) return false;\n    try {\n      return fs.statSync(path.join(dir, n)).isDirectory();\n    } catch {\n      return false;\n    }\n  });\n}\n\nfunction real(p: string): string {\n  try {\n    return fs.realpathSync(p);\n  } catch {\n    return p;\n  }\n}\n"]}

package/lib/esm/localize/localize.d.ts

@@ -0,0 +1,84 @@
+import type { ManifestEntry } from './manifest.js';
+import type { Deps } from './run.js';
+import type { PruneOptions } from './prune.js';
+/**
+ * @param {string[]} names  full npm package names
+ * @param {object} opts  `{force, dir, repo, subdir, build, prune}` -- `prune`
+ *   defaults to true; see prune.ts
+ * @param {object} deps  `{appRoot, run, log, warn, error}`
+ * @returns {number} the process exit code: the HIGHEST of the per-name codes,
+ *   since each name is atomic and a failure on name 2 does not undo name 1.
+ */
+export interface LocalizeOptions extends PruneOptions {
+    force?: boolean;
+    /** Where checkouts live, relative to the app root (default `packages-local`). */
+    dir?: string;
+    repo?: string;
+    subdir?: string;
+    /** Run in the checkout after installing; absent or empty runs nothing. */
+    build?: string;
+}
+/** What one name's work returns to the shared loop. */
+export interface OneResult {
+    code: number;
+    entry?: {
+        name: string;
+        value: ManifestEntry;
+    };
+}
+export type OneName = (name: string, dir: string, recorded: ManifestEntry | undefined, opts: LocalizeOptions, deps: Deps) => OneResult;
+export declare function localize(names: string[], opts: LocalizeOptions, deps: Deps): number;
+/**
+ * The loop `localize` and `adopt` share: read the manifest once, run `one` per
+ * name, write the manifest after each, then assert the links and the
+ * consumer's untouched manifests.
+ *
+ * @param {(name: string, dir: string, recorded: object|undefined, opts: object, deps: object)
+ *   => {code: number, entry?: {name: string, value: object}}} one
+ */
+export declare function forEachName(names: string[], opts: LocalizeOptions, deps: Deps, one: OneName): number;
+/**
+ * Everything after the checkout exists, shared by `localize` and `adopt`:
+ * install inside it, run the configured build, link it, and describe the
+ * manifest entry. Nothing here knows how the checkout got there.
+ *
+ * `repo` may be absent -- an adopted checkout with no remote is recorded
+ * without one.
+ */
+export declare function installLinkAndRecord({ npmName, clone, relPkg, pkgDir, repo, subdir, }: {
+    npmName: string;
+    clone: string;
+    relPkg: string;
+    pkgDir: string;
+    repo?: string;
+    subdir?: string;
+}, opts: LocalizeOptions, deps: Deps, code?: number): {
+    code: number;
+    entry: {
+        name: string;
+        value: ManifestEntry;
+    };
+};
+/** Refuse when `node_modules/<name>` is already a symlink pointing outside `<dir>`. */
+export declare function guardForeignLink(npmName: string, dir: string, opts: {
+    force?: boolean;
+}, deps: Deps): void;
+/**
+ * The property the whole design rests on: this run changed neither manifest.
+ *
+ * Content hashes, not `git status`. `git status` compares against HEAD, so in
+ * any tree with an uncommitted `package.json` it reports a modification the
+ * command did not make -- an earlier tool shipped exactly that and reported
+ * correct runs as failures.
+ */
+export declare function assertManifestsUntouched(before: Record<string, string | null>, deps: Deps): number;
+export declare function reportError(e: unknown, deps: Pick<Deps, 'error'>): number;
+/**
+ * The checked-out branch, or `HEAD` when detached. `symbolic-ref` first,
+ * because it also names the branch of a repository with no commits yet --
+ * `rev-parse --abbrev-ref` fails there, and `create-package` adopts a fresh
+ * `git init` before its first commit.
+ */
+export declare function currentBranch(clone: string, deps: Deps): string;
+export declare function declaredRange(name: string, deps: Pick<Deps, 'appRoot'>): string | undefined;
+//# sourceMappingURL=localize.d.ts.map

package/lib/esm/localize/localize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localize.d.ts","sourceRoot":"","sources":["../../../src/localize/localize.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,UAAU,CAAC;AAInC,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AAW7C;;;;;;;GAOG;AACH,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAC,CAAC;CAC9C;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,aAAa,GAAG,SAAS,EACnC,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,IAAI,KACP,SAAS,CAAC;AAEf,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,IAAI,GACT,MAAM,CAER;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,OAAO,GACX,MAAM,CAgDR;AAuFD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,EACE,OAAO,EACP,KAAK,EACL,MAAM,EACN,MAAM,EACN,IAAI,EACJ,MAAM,GACP,EAAE;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,EACD,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,IAAI,EACV,IAAI,SAAI,GACP;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAC,CAAA;CAAC,CAoC7D;AAiFD,uFAAuF;AACvF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAC,EACvB,IAAI,EAAE,IAAI,GACT,IAAI,CAqBN;AA0BD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,EACrC,IAAI,EAAE,IAAI,GACT,MAAM,CAUR;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,CAMzE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,CAU/D;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,GAC1B,MAAM,GAAG,SAAS,CAQpB"}

package/lib/esm/localize/localize.js

@@ -0,0 +1,354 @@
+/**
+ * `localize` -- turn an npm-installed dependency into an editable git checkout.
+ *
+ * The loop, in five steps, none of which involve npm learning anything:
+ *
+ *   1. npm name -> registry `repository` (see resolve.ts)
+ *   2. `git clone` into `<dir>/<name>`
+ *   3. **`npm install` INSIDE the checkout**, then prune it (`ensure`)
+ *   4. `fs.symlink` node_modules/<name> -> the checkout
+ *   5. record it in a gitignored manifest
+ *
+ * `adopt` (adopt.ts) enters at step 3 with a checkout that is already there,
+ * and shares everything from there on: `forEachName` and `installLinkAndRecord`
+ * below.
+ *
+ * Step 3 is the one that is easy to "simplify" and must not be. Installing
+ * from the parent instead -- `npm install <path> --no-save` -- hard-failed an
+ * app's boot on a missing peer dependency, because module resolution happens
+ * from the symlink's REAL path, whose ancestors have no `node_modules`. The
+ * checkout needs its own installed tree. `tests/unit/localize/real-localize.test.ts` runs a
+ * real clone and a real install and asserts the dependency landed inside the
+ * checkout, so a reimplementation that moves the install back out fails there.
+ *
+ * A clone, not a copy: a published tarball has no `src/`, so copying the
+ * installed package cannot give you something to edit.
+ *
+ * What localize NEVER does: run an install at the consumer root, or edit
+ * `package.json`, `package-lock.json`, `.gitignore`, `workspaces` or any
+ * bundler config. It asserts it did not before exiting 0.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { EXIT_INSTALL_FAILED, EXIT_NOT_FOUND, EXIT_MANIFEST_DIRTY, EXIT_REFUSED, EXIT_WARNED, LocalizeError, } from './errors.js';
+import { DEFAULT_DIR, SCHEMA_VERSION, readManifest, writeManifest, } from './manifest.js';
+import { checkoutNameFor, resolvePackage } from './resolve.js';
+import { pruneProvided, shouldPrune } from './prune.js';
+import { ensure } from './ensure.js';
+import { diffManifests, isGitCheckout, isInside, isSymlink, readJson, snapshotManifests, writeLink, } from './fsops.js';
+export function localize(names, opts, deps) {
+    return forEachName(names, opts, deps, localizeOne);
+}
+/**
+ * The loop `localize` and `adopt` share: read the manifest once, run `one` per
+ * name, write the manifest after each, then assert the links and the
+ * consumer's untouched manifests.
+ *
+ * @param {(name: string, dir: string, recorded: object|undefined, opts: object, deps: object)
+ *   => {code: number, entry?: {name: string, value: object}}} one
+ */
+export function forEachName(names, opts, deps, one) {
+    var _a, _b;
+    // Taken BEFORE anything runs: the post-condition is about what THIS run
+    // changed, not about what the tree looked like at HEAD.
+    const before = snapshotManifests(deps.appRoot);
+    let manifest;
+    try {
+        manifest = readManifest(deps.appRoot, deps);
+    }
+    catch (e) {
+        return reportError(e, deps);
+    }
+    const dir = (_b = (_a = opts.dir) !== null && _a !== void 0 ? _a : manifest.dir) !== null && _b !== void 0 ? _b : DEFAULT_DIR;
+    const entries = Object.assign({}, manifest.entries);
+    let code = 0;
+    for (const name of names) {
+        try {
+            const result = one(name, dir, entries[name], opts, deps);
+            if (result.entry)
+                entries[result.entry.name] = result.entry.value;
+            code = Math.max(code, result.code);
+            // Written after EACH name, so an interruption keeps what already worked.
+            writeManifest(deps.appRoot, {
+                version: SCHEMA_VERSION,
+                dir,
+                packages: entries,
+            });
+        }
+        catch (e) {
+            code = Math.max(code, reportError(e, deps));
+        }
+    }
+    // Over EVERY localized checkout, not just the ones named: localizing `B`
+    // is what makes `A`'s registry copy of `B` redundant.
+    if (shouldPrune(opts)) {
+        try {
+            pruneProvided(entries, opts, deps);
+        }
+        catch (e) {
+            deps.warn(`[localize] pruning failed, the checkouts' node_modules are as npm left them: ${e.message}`);
+            code = Math.max(code, EXIT_WARNED);
+        }
+    }
+    code = Math.max(code, assertLinked(entries, deps));
+    code = Math.max(code, assertManifestsUntouched(before, deps));
+    return code;
+}
+function localizeOne(name, dir, recorded, opts, deps) {
+    var _a;
+    // An override recorded by an earlier run is reused, so `--repo` is a
+    // one-time cost rather than something to remember on every invocation.
+    const override = opts.repo
+        ? { repo: opts.repo, subdir: opts.subdir }
+        : (recorded === null || recorded === void 0 ? void 0 : recorded.repo) && !looksLikeOrgSlug(recorded.repo)
+            ? { repo: recorded.repo, subdir: recorded.subdir }
+            : undefined;
+    const resolved = resolveOrSuggestAdopt(name, dir, override, deps);
+    let code = 0;
+    const relClone = path.join(dir, resolved.checkoutName);
+    const clone = path.join(deps.appRoot, relClone);
+    // When the repository holds more than this package, the CHECKOUT is the
+    // clone but the PACKAGE is a directory inside it: that is where the install
+    // runs and that is what the symlink points at.
+    const relPkg = resolved.subdir
+        ? path.join(relClone, resolved.subdir)
+        : relClone;
+    const pkgDir = path.join(deps.appRoot, relPkg);
+    guardForeignLink(resolved.npmName, dir, opts, deps);
+    if (isGitCheckout(clone)) {
+        code = Math.max(code, refresh(relClone, clone, deps));
+        if (code === EXIT_WARNED)
+            return { code }; // a non-fast-forward is reported, never forced
+    }
+    else {
+        fs.mkdirSync(path.dirname(clone), { recursive: true });
+        deps.log(`[localize] cloning ${resolved.repo} -> ${relClone}`);
+        const r = deps.run('git', ['clone', resolved.repo, clone]);
+        if (r.status !== 0) {
+            throw new LocalizeError(`git clone ${resolved.repo} failed:\n${(r.stderr || r.stdout).trim()}`, EXIT_REFUSED);
+        }
+    }
+    if (!fs.existsSync(path.join(pkgDir, 'package.json'))) {
+        throw new LocalizeError(`${relPkg} has no package.json, so it is not the package "${name}".\n` +
+            (resolved.subdir
+                ? `The registry says "${name}" lives in "${resolved.subdir}" of ${resolved.repo}, and it does not.`
+                : `${resolved.repo} looks like a monorepo root. Say where the package lives:\n` +
+                    `  linked localize ${name} --repo ${resolved.repo} --subdir <path-inside-the-repo>`), EXIT_REFUSED);
+    }
+    // The checkout's own package.json is authoritative about the name: a
+    // mismatch means the symlink would be written under a name nothing imports.
+    const declared = (_a = readJson(path.join(pkgDir, 'package.json'))) === null || _a === void 0 ? void 0 : _a.name;
+    if (declared && declared !== resolved.npmName) {
+        throw new LocalizeError(`${relPkg} declares itself as "${declared}", not "${name}".\n` +
+            (resolved.subdir
+                ? `The registry's repository.directory for "${name}" points at the wrong package.`
+                : `${resolved.repo} is probably a monorepo. Point at the right directory:\n` +
+                    `  linked localize ${name} --repo ${resolved.repo} --subdir <path-inside-the-repo>`), EXIT_REFUSED);
+    }
+    return installLinkAndRecord({
+        npmName: resolved.npmName,
+        clone,
+        relPkg,
+        pkgDir,
+        repo: resolved.repo,
+        subdir: resolved.subdir,
+    }, opts, deps, code);
+}
+/**
+ * Everything after the checkout exists, shared by `localize` and `adopt`:
+ * install inside it, run the configured build, link it, and describe the
+ * manifest entry. Nothing here knows how the checkout got there.
+ *
+ * `repo` may be absent -- an adopted checkout with no remote is recorded
+ * without one.
+ */
+export function installLinkAndRecord({ npmName, clone, relPkg, pkgDir, repo, subdir, }, opts, deps, code = 0) {
+    // THE constraint. Read the module header before changing this. `ensure`
+    // installs inside the checkout and prunes it as one step (ensure.ts).
+    try {
+        code = Math.max(code, ensure({ path: relPkg, subdir }, deps, opts));
+    }
+    catch (e) {
+        if (e instanceof LocalizeError && e.code === EXIT_INSTALL_FAILED)
+            e.message += `\nThe checkout is left on disk. Nothing was linked and nothing was recorded.`;
+        throw e;
+    }
+    // The build is the one thing localize does not know how to do, so it is
+    // configuration rather than behaviour. A failure is a WARNING: a package
+    // whose build is broken is exactly what you are about to fix, and refusing
+    // to link it would be perverse.
+    if (runBuild(relPkg, pkgDir, opts, deps) === 'failed')
+        code = Math.max(code, EXIT_WARNED);
+    writeLink(deps.appRoot, npmName, pkgDir);
+    const branch = currentBranch(clone, deps);
+    deps.log(`[localize] linked ${npmName} -> ${relPkg} (branch ${branch})`);
+    const range = declaredRange(npmName, deps);
+    return {
+        code,
+        entry: {
+            name: npmName,
+            value: Object.assign(Object.assign(Object.assign(Object.assign({}, (repo ? { repo } : {})), { path: relPkg, branch }), (subdir ? { subdir } : {})), (range ? { range } : {})),
+        },
+    };
+}
+/**
+ * A registry lookup that fails while a git checkout already sits where the
+ * clone would go is almost always a package that was never published -- one
+ * made locally. Say how to link it as it is rather than leave the developer
+ * guessing at a `--repo`.
+ */
+function resolveOrSuggestAdopt(name, dir, override, deps) {
+    try {
+        return resolvePackage(name, deps, override);
+    }
+    catch (e) {
+        const relClone = path.join(dir, checkoutNameFor(name));
+        if (e instanceof LocalizeError &&
+            e.code === EXIT_NOT_FOUND &&
+            isGitCheckout(path.join(deps.appRoot, relClone))) {
+            e.message +=
+                `\n${relClone} is already a git checkout. To link it as it is, with no registry lookup:\n` +
+                    `  linked localize ${name} --adopt`;
+        }
+        throw e;
+    }
+}
+/** Older manifests recorded `owner/repo`; those are re-resolved rather than cloned blind. */
+function looksLikeOrgSlug(repo) {
+    return /^[\w.-]+\/[\w.-]+$/.test(repo);
+}
+/**
+ * Reuse an existing clone. A dirty tree is reused WITHOUT pulling and said so;
+ * a clean one is fast-forwarded; a non-fast-forward is reported and skipped
+ * rather than forced, because the developer's commits are the entire point.
+ */
+function refresh(relPath, clone, deps) {
+    const status = deps.run('git', ['status', '--porcelain'], { cwd: clone });
+    const modified = status.stdout.split('\n').filter((l) => l.trim()).length;
+    if (modified > 0) {
+        deps.log(`[localize] ${relPath}: ${modified} modified file${modified === 1 ? '' : 's'} — not pulling`);
+        return 0;
+    }
+    const pull = deps.run('git', ['pull', '--ff-only'], { cwd: clone });
+    if (pull.status !== 0) {
+        deps.warn(`[localize] ${relPath}: \`git pull --ff-only\` failed (not a fast-forward) — skipped, not ` +
+            `forced. Reconcile it by hand:\n${(pull.stderr || pull.stdout).trim()}`);
+        return EXIT_WARNED;
+    }
+    return 0;
+}
+/**
+ * Run the configured build command, if there is one.
+ *
+ * localize has no opinion about how a checkout is built, and does not look for
+ * a builder. `--build "<cmd>"`, or a `build` field in the manifest, or
+ * `{build}` in the programmatic options. Absent -- the common case, and the
+ * case for anything whose dev loop reads source directly -- nothing runs and
+ * nothing is said.
+ */
+function runBuild(relPath, pkgDir, opts, deps) {
+    const cmd = opts.build;
+    if (!cmd)
+        return 'skipped';
+    deps.log(`[localize] ${relPath}: ${cmd}`);
+    const r = deps.run(cmd, [], { cwd: pkgDir, shell: true });
+    if (r.status !== 0) {
+        deps.warn(`[localize] ${relPath}: \`${cmd}\` failed. The package is linked and recorded anyway — ` +
+            `a package whose build is broken is exactly what you are about to fix.\n` +
+            `${(r.stderr || r.stdout).trim()}`);
+        return 'failed';
+    }
+    return 'ok';
+}
+/** Refuse when `node_modules/<name>` is already a symlink pointing outside `<dir>`. */
+export function guardForeignLink(npmName, dir, opts, deps) {
+    const link = path.join(deps.appRoot, 'node_modules', npmName);
+    if (!isSymlink(link))
+        return;
+    let target;
+    try {
+        target = fs.realpathSync(link);
+    }
+    catch (_a) {
+        return; // a dangling link is ours to replace
+    }
+    if (isInside(target, path.join(deps.appRoot, dir)))
+        return;
+    if (opts.force) {
+        deps.warn(`[localize] --force: overwriting the existing link ${npmName} -> ${target}`);
+        return;
+    }
+    throw new LocalizeError(`node_modules/${npmName} is already a symlink to ${target}, which is outside ${dir}.\n` +
+        `Refusing to overwrite someone else's link. Pass --force to replace it.`, EXIT_REFUSED);
+}
+/** Every recorded package is actually linked where the manifest says it is. */
+function assertLinked(entries, deps) {
+    let code = 0;
+    for (const [name, entry] of Object.entries(entries)) {
+        const link = path.join(deps.appRoot, 'node_modules', name);
+        const expected = path.join(deps.appRoot, entry.path);
+        if (!isSymlink(link)) {
+            deps.warn(`[localize] ${name} is recorded but node_modules/${name} is not a symlink.`);
+            code = Math.max(code, EXIT_WARNED);
+            continue;
+        }
+        if (!fs.existsSync(expected))
+            continue; // "checkout missing" is a --list state, not a failure
+        if (fs.realpathSync(link) !== fs.realpathSync(expected)) {
+            deps.warn(`[localize] ${name} links to ${fs.realpathSync(link)} but the manifest records ${entry.path}.`);
+            code = Math.max(code, EXIT_WARNED);
+        }
+    }
+    return code;
+}
+/**
+ * The property the whole design rests on: this run changed neither manifest.
+ *
+ * Content hashes, not `git status`. `git status` compares against HEAD, so in
+ * any tree with an uncommitted `package.json` it reports a modification the
+ * command did not make -- an earlier tool shipped exactly that and reported
+ * correct runs as failures.
+ */
+export function assertManifestsUntouched(before, deps) {
+    const changed = diffManifests(before, snapshotManifests(deps.appRoot));
+    if (!changed.length)
+        return 0;
+    deps.error(`[localize] the consumer's manifests changed while this command ran:\n` +
+        changed.map((c) => `  ${c}`).join('\n') +
+        `\nThis is the exact failure localize exists to prevent. Revert those files; nothing in ` +
+        `localize is supposed to touch them.`);
+    return EXIT_MANIFEST_DIRTY;
+}
+export function reportError(e, deps) {
+    if (e instanceof LocalizeError) {
+        deps.error(`[localize] ${e.message}`);
+        return e.code;
+    }
+    throw e;
+}
+/**
+ * The checked-out branch, or `HEAD` when detached. `symbolic-ref` first,
+ * because it also names the branch of a repository with no commits yet --
+ * `rev-parse --abbrev-ref` fails there, and `create-package` adopts a fresh
+ * `git init` before its first commit.
+ */
+export function currentBranch(clone, deps) {
+    const sym = deps.run('git', ['symbolic-ref', '--short', '-q', 'HEAD'], {
+        cwd: clone,
+    });
+    if (sym.status === 0 && sym.stdout.trim())
+        return sym.stdout.trim();
+    const r = deps.run('git', ['rev-parse', '--abbrev-ref', 'HEAD'], {
+        cwd: clone,
+    });
+    const b = r.stdout.trim();
+    return r.status === 0 && b ? b : 'HEAD';
+}
+export function declaredRange(name, deps) {
+    var _a, _b, _c, _d, _e;
+    const pkg = readJson(path.join(deps.appRoot, 'package.json'));
+    if (!pkg)
+        return undefined;
+    return ((_d = (_b = (_a = pkg.dependencies) === null || _a === void 0 ? void 0 : _a[name]) !== null && _b !== void 0 ? _b : (_c = pkg.devDependencies) === null || _c === void 0 ? void 0 : _c[name]) !== null && _d !== void 0 ? _d : (_e = pkg.optionalDependencies) === null || _e === void 0 ? void 0 : _e[name]);
+}
+//# sourceMappingURL=localize.js.map