@antongolub/lockfile 0.0.0-snapshot.62 → 0.0.0-snapshot.63

package/dist/{_npm-flat-types-CNIJpuMe.d.ts → _npm-flat-types-CR16JZFS.d.ts}

@@ -1,4 +1,4 @@
-import { D as Diagnostic, O as OverrideConstraint } from './graph-1poNzYjw.js';
+import { D as Diagnostic, O as OverrideConstraint } from './graph-CPo-SvS2.js';
 
 interface NpmFamilyParseOptions {
 }

package/dist/{_pnpm-flat-core-Bx_-WTrC.d.ts → _pnpm-flat-core-DmGs4UQu.d.ts}

@@ -1,4 +1,4 @@
-import { D as Diagnostic, O as OverrideConstraint } from './graph-1poNzYjw.js';
+import { D as Diagnostic, O as OverrideConstraint } from './graph-CPo-SvS2.js';
 
 interface PnpmFamilyParseOptions {
     /**

package/dist/{_yarn-berry-core-B56PpQ7F.d.ts → _yarn-berry-core-BhE-AhmX.d.ts}

@@ -1,4 +1,4 @@
-import { O as OverrideConstraint, D as Diagnostic } from './graph-1poNzYjw.js';
+import { O as OverrideConstraint, D as Diagnostic } from './graph-CPo-SvS2.js';
 
 interface YarnBerryFamilyParseOptions {
     workspaceRoot?: string;

package/dist/complete.d.ts

@@ -1,5 +1,5 @@
-import { N as NodeId, D as Diagnostic, G as Graph, E as EdgeTriple, a as Node, b as EdgeKind } from './graph-1poNzYjw.js';
-import { R as RegistryAdapter } from './types-DC8j2G_4.js';
+import { N as NodeId, D as Diagnostic, G as Graph, E as EdgeTriple, a as Node, b as EdgeKind } from './graph-CPo-SvS2.js';
+import { R as RegistryAdapter } from './types-BPMSHpCF.js';
 
 interface CompletionSeed {
     /** NodeIds the modifier added in the just-completed mutate phase. */

package/dist/formats/bun-text.d.ts

@@ -1,4 +1,4 @@
-import { O as OverrideConstraint, D as Diagnostic, G as Graph } from '../graph-1poNzYjw.js';
+import { O as OverrideConstraint, D as Diagnostic, G as Graph } from '../graph-CPo-SvS2.js';
 
 interface BunTextParseOptions {
 }

package/dist/formats/npm-1.d.ts

@@ -1,4 +1,4 @@
-import { D as Diagnostic, G as Graph } from '../graph-1poNzYjw.js';
+import { D as Diagnostic, G as Graph } from '../graph-CPo-SvS2.js';
 
 interface Npm1ParseOptions {
 }

package/dist/formats/npm-1.js

@@ -737,8 +737,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -767,6 +778,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -923,6 +948,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":

package/dist/formats/npm-2.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { N as NpmFamilyEnrichOptions, a as NpmFamilyOptimizeOptions, b as NpmFamilyParseOptions, c as NpmFamilyStringifyOptions } from '../_npm-flat-types-CNIJpuMe.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { N as NpmFamilyEnrichOptions, a as NpmFamilyOptimizeOptions, b as NpmFamilyParseOptions, c as NpmFamilyStringifyOptions } from '../_npm-flat-types-CR16JZFS.js';
 
 interface Npm2ParseOptions extends NpmFamilyParseOptions {
 }

package/dist/formats/npm-2.js

@@ -791,8 +791,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -821,6 +832,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -977,6 +1002,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":

package/dist/formats/npm-3.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { N as NpmFamilyEnrichOptions, a as NpmFamilyOptimizeOptions, b as NpmFamilyParseOptions, c as NpmFamilyStringifyOptions } from '../_npm-flat-types-CNIJpuMe.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { N as NpmFamilyEnrichOptions, a as NpmFamilyOptimizeOptions, b as NpmFamilyParseOptions, c as NpmFamilyStringifyOptions } from '../_npm-flat-types-CR16JZFS.js';
 
 interface Npm3ParseOptions extends NpmFamilyParseOptions {
 }

package/dist/formats/npm-3.js

@@ -791,8 +791,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -821,6 +832,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -977,6 +1002,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":

package/dist/formats/pnpm-v5.d.ts

@@ -1,4 +1,4 @@
-import { D as Diagnostic, G as Graph } from '../graph-1poNzYjw.js';
+import { D as Diagnostic, G as Graph } from '../graph-CPo-SvS2.js';
 
 interface PnpmV5ParseOptions {
 }

package/dist/formats/pnpm-v5.js

@@ -757,8 +757,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -787,6 +798,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;

package/dist/formats/pnpm-v6.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { P as PnpmFamilyEnrichOptions, a as PnpmManifest, b as PnpmFamilyOptimizeOptions, c as PnpmFamilyParseOptions, d as PnpmSettings, e as PnpmFamilyStringifyOptions } from '../_pnpm-flat-core-Bx_-WTrC.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { P as PnpmFamilyEnrichOptions, a as PnpmManifest, b as PnpmFamilyOptimizeOptions, c as PnpmFamilyParseOptions, d as PnpmSettings, e as PnpmFamilyStringifyOptions } from '../_pnpm-flat-core-DmGs4UQu.js';
 
 interface PnpmV6ParseOptions extends PnpmFamilyParseOptions {
 }

package/dist/formats/pnpm-v6.js

@@ -816,8 +816,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -846,6 +857,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;

package/dist/formats/pnpm-v9.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { P as PnpmFamilyEnrichOptions, a as PnpmManifest, b as PnpmFamilyOptimizeOptions, c as PnpmFamilyParseOptions, d as PnpmSettings, e as PnpmFamilyStringifyOptions } from '../_pnpm-flat-core-Bx_-WTrC.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { P as PnpmFamilyEnrichOptions, a as PnpmManifest, b as PnpmFamilyOptimizeOptions, c as PnpmFamilyParseOptions, d as PnpmSettings, e as PnpmFamilyStringifyOptions } from '../_pnpm-flat-core-DmGs4UQu.js';
 
 interface PnpmV9ParseOptions extends PnpmFamilyParseOptions {
 }

package/dist/formats/pnpm-v9.js

@@ -816,8 +816,19 @@ function parse(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -846,6 +857,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;

package/dist/formats/yarn-berry-v10.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-B56PpQ7F.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-BhE-AhmX.js';
 
 interface YarnBerryParseOptions extends YarnBerryFamilyParseOptions {
 }

package/dist/formats/yarn-berry-v10.js

@@ -1113,8 +1113,19 @@ function parse2(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -1143,6 +1154,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -1299,6 +1324,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":
@@ -2578,11 +2606,14 @@ function irreducibleCollisionMessage(id, currentKey, priorEntries) {
   const priorResolution = priorEntry !== void 0 ? asString(priorEntry.value["resolution"]) : void 0;
   const isLink = (r) => r !== void 0 && (r.includes("@link:") || r.includes("@portal:"));
   const isPatch = (r) => r !== void 0 && r.includes("@patch:");
-  let hint = "likely npm: alias, patch: collision, or workspace link: locator collision";
+  const isBind = (r) => r !== void 0 && r.includes("::");
+  let hint = "likely npm: alias, patch: collision, workspace link: locator collision, or a `::` bind modifier (`::__archiveUrl=` / `::version=` / `::hash=`)";
   if (isLink(currentResolution) || isLink(priorResolution)) {
     hint = "likely workspace link: / portal: locator collision (yarn `::locator=` qualifier was lost)";
   } else if (isPatch(currentResolution) || isPatch(priorResolution)) {
     hint = "likely patch: collision";
+  } else if (isBind(currentResolution) || isBind(priorResolution)) {
+    hint = "likely a `::` bind modifier collision (`::__archiveUrl=` private-registry mirror, `::version=`, or `::hash=` \u2014 the bind was lost from the NodeId)";
   }
   const resolutions = [priorResolution, currentResolution].filter((r) => typeof r === "string");
   const tail = resolutions.length > 0 ? ` \u2014 resolutions: [${resolutions.map((r) => JSON.stringify(r)).join(", ")}]` : "";

package/dist/formats/yarn-berry-v4.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-B56PpQ7F.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-BhE-AhmX.js';
 
 interface YarnBerryParseOptions extends YarnBerryFamilyParseOptions {
 }

package/dist/formats/yarn-berry-v4.js

@@ -1113,8 +1113,19 @@ function parse2(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -1143,6 +1154,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -1299,6 +1324,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":
@@ -2582,11 +2610,14 @@ function irreducibleCollisionMessage(id, currentKey, priorEntries) {
   const priorResolution = priorEntry !== void 0 ? asString(priorEntry.value["resolution"]) : void 0;
   const isLink = (r) => r !== void 0 && (r.includes("@link:") || r.includes("@portal:"));
   const isPatch = (r) => r !== void 0 && r.includes("@patch:");
-  let hint = "likely npm: alias, patch: collision, or workspace link: locator collision";
+  const isBind = (r) => r !== void 0 && r.includes("::");
+  let hint = "likely npm: alias, patch: collision, workspace link: locator collision, or a `::` bind modifier (`::__archiveUrl=` / `::version=` / `::hash=`)";
   if (isLink(currentResolution) || isLink(priorResolution)) {
     hint = "likely workspace link: / portal: locator collision (yarn `::locator=` qualifier was lost)";
   } else if (isPatch(currentResolution) || isPatch(priorResolution)) {
     hint = "likely patch: collision";
+  } else if (isBind(currentResolution) || isBind(priorResolution)) {
+    hint = "likely a `::` bind modifier collision (`::__archiveUrl=` private-registry mirror, `::version=`, or `::hash=` \u2014 the bind was lost from the NodeId)";
   }
   const resolutions = [priorResolution, currentResolution].filter((r) => typeof r === "string");
   const tail = resolutions.length > 0 ? ` \u2014 resolutions: [${resolutions.map((r) => JSON.stringify(r)).join(", ")}]` : "";

package/dist/formats/yarn-berry-v5.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-B56PpQ7F.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-BhE-AhmX.js';
 
 interface YarnBerryParseOptions extends YarnBerryFamilyParseOptions {
 }

package/dist/formats/yarn-berry-v5.js

@@ -1113,8 +1113,19 @@ function parse2(raw, options = {}) {
 }
 function parseInner(protocol, spec, raw, options) {
   switch (protocol) {
-    case "npm":
-      return { type: "tarball", url: deriveRegistryUrl(options.name, spec) };
+    case "npm": {
+      const bindIdx = spec.indexOf("::");
+      const version = bindIdx >= 0 ? spec.slice(0, bindIdx) : spec;
+      const bindSuffix = bindIdx >= 0 ? spec.slice(bindIdx + 2) : void 0;
+      if (bindSuffix !== void 0) {
+        const archiveUrl = archiveUrlOfBind(bindSuffix);
+        if (archiveUrl !== void 0) {
+          return { type: "tarball", url: archiveUrl };
+        }
+        return { type: "tarball", url: deriveRegistryUrl(options.name, version), bind: bindSuffix };
+      }
+      return { type: "tarball", url: deriveRegistryUrl(options.name, version) };
+    }
     case "portal":
       return { type: "directory", path: normaliseDirectoryPath(spec) };
     case "file":
@@ -1143,6 +1154,20 @@ function deriveRegistryUrl(name, spec) {
 function looksLikeNpmName(s) {
   return /^(?:@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i.test(s);
 }
+function archiveUrlOfBind(bindSuffix) {
+  for (const pair of bindSuffix.split("&")) {
+    const eq = pair.indexOf("=");
+    if (eq < 0) continue;
+    if (pair.slice(0, eq) !== "__archiveUrl") continue;
+    const enc = pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(enc);
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function registryUrlOf(name, version) {
   const tail = name.startsWith("@") ? name.split("/").slice(1).join("/") : name;
   return `https://registry.npmjs.org/${name}/-/${tail}-${version}.tgz`;
@@ -1299,6 +1324,9 @@ function canonicalSourceStringOf(resolution) {
       return `git\0${resolution.url}\0${resolution.sha}`;
     case "tarball": {
       const host = hostOfTarballUrl(resolution.url);
+      if (resolution.bind !== void 0) {
+        return `tarball\0${host ?? resolution.url}\0bind=${resolution.bind}`;
+      }
       return host !== void 0 && REGISTRY_HOSTS.has(host) ? void 0 : `tarball\0${host ?? resolution.url}`;
     }
     case "directory":
@@ -2577,11 +2605,14 @@ function irreducibleCollisionMessage(id, currentKey, priorEntries) {
   const priorResolution = priorEntry !== void 0 ? asString(priorEntry.value["resolution"]) : void 0;
   const isLink = (r) => r !== void 0 && (r.includes("@link:") || r.includes("@portal:"));
   const isPatch = (r) => r !== void 0 && r.includes("@patch:");
-  let hint = "likely npm: alias, patch: collision, or workspace link: locator collision";
+  const isBind = (r) => r !== void 0 && r.includes("::");
+  let hint = "likely npm: alias, patch: collision, workspace link: locator collision, or a `::` bind modifier (`::__archiveUrl=` / `::version=` / `::hash=`)";
   if (isLink(currentResolution) || isLink(priorResolution)) {
     hint = "likely workspace link: / portal: locator collision (yarn `::locator=` qualifier was lost)";
   } else if (isPatch(currentResolution) || isPatch(priorResolution)) {
     hint = "likely patch: collision";
+  } else if (isBind(currentResolution) || isBind(priorResolution)) {
+    hint = "likely a `::` bind modifier collision (`::__archiveUrl=` private-registry mirror, `::version=`, or `::hash=` \u2014 the bind was lost from the NodeId)";
   }
   const resolutions = [priorResolution, currentResolution].filter((r) => typeof r === "string");
   const tail = resolutions.length > 0 ? ` \u2014 resolutions: [${resolutions.map((r) => JSON.stringify(r)).join(", ")}]` : "";

package/dist/formats/yarn-berry-v6.d.ts

@@ -1,5 +1,5 @@
-import { G as Graph, D as Diagnostic } from '../graph-1poNzYjw.js';
-import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-B56PpQ7F.js';
+import { G as Graph, D as Diagnostic } from '../graph-CPo-SvS2.js';
+import { Y as YarnBerryFamilyEnrichOptions, a as YarnBerryFamilyOptimizeOptions, b as YarnBerryFamilyParseOptions, c as YarnBerryFamilyStringifyOptions } from '../_yarn-berry-core-BhE-AhmX.js';
 
 interface YarnBerryParseOptions extends YarnBerryFamilyParseOptions {
 }