@antongolub/lockfile 0.0.0-snapshot.72 → 0.0.0-snapshot.74

package/README.md

@@ -101,7 +101,11 @@ format-agnostically:
 - **`modify`** applies a `Primitive[]` — `replaceVersion`, `pinOverride`,
   `addDependency`, `removeDependency`, `applyPatch`, `filterLicense` — the
   building blocks of audit-fix, override-pinning and license filtering.
-- **`optimize`** runs orphan GC / dedup over the graph.
+- **`optimize`** runs orphan GC / dedup over the graph (a production-reachability
+  sweep). **`pruneOrphans`** (via `@antongolub/lockfile/optimize`) is the
+  reference-count sibling: it retires only nodes that lost their *last* incoming
+  edge of any kind — post-bump cleanup that, unlike reachability, never
+  over-collects a still-referenced dev/optional/peer dep.
 - **`overridesOf(graph)`** reads the canonical overrides back out.
 
 ### Options
@@ -132,7 +136,9 @@ ships as opt-in adapters (see [Sub-imports](#sub-imports)).
 |---------|---------------|----------|
 | Root | `@antongolub/lockfile` | `detect`, `check`, `parse`, `stringify`, `convert`, `modify`, `optimize`, `overridesOf`, plus types `Graph`, `FormatId`, `ParseOptions`, `StringifyOptions`, `ConvertOptions`, `Manifest` |
 | Modifiers | `@antongolub/lockfile/modify` | the individual `Primitive` functions behind `modify` (audit-fix, override-pin, license-filter) |
-| Optimize | `@antongolub/lockfile/optimize` | the individual GC passes behind `optimize` |
+| Complete | `@antongolub/lockfile/complete` | `completeTransitives` — registry-backed tree completion that wires the transitive deps a modify introduced |
+| Optimize | `@antongolub/lockfile/optimize` | `optimize` (reachability orphan GC) and `pruneOrphans` (reference-count orphan GC) |
+| Enrich | `@antongolub/lockfile/enrich` | `refurbish` — monotone field-fill (e.g. recomputes a yarn-berry zip `checksum` from a tarball source so a patched lock installs without `yarn install`) |
 | Registry | `@antongolub/lockfile/registry` | `frozenRegistry`, `liveRegistry`, `fsCache`, `npmCache`, `pnpmCache` |
 | Per-format | `@antongolub/lockfile/formats/<id>` | a single adapter directly (test surface; not a primary user API) |
 

package/dist/enrich.js

@@ -214,6 +214,10 @@ async function refurbish(graph, format, source, opts = {}) {
     if (node.workspacePath !== void 0) continue;
     const payload = graph.tarballOf(node.id) ?? {};
     if (emitBerryChecksum(payload.integrity ?? emptyIntegrity()) !== void 0) continue;
+    if (node.patch !== void 0) {
+      record(enrichChecksumDeferred(node.id));
+      continue;
+    }
     if (!isStore) {
       record(enrichChecksumDeferred(node.id));
       continue;

package/dist/formats/yarn-berry-v10.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2941,6 +2948,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v4.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2945,6 +2952,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v5.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2940,6 +2947,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v6.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2940,6 +2947,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v7.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2940,6 +2947,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v8.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2941,6 +2948,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/formats/yarn-berry-v9.js

@@ -1487,6 +1487,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr2);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr2) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -2941,6 +2948,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/dist/index.js

@@ -6382,6 +6382,13 @@ function distTagResolve(range, candidates) {
   const ids = eligible.map((c) => c.id).sort(cmpStr4);
   return { kind: "ambiguous", candidateIds: ids };
 }
+function catalogResolve(range, candidates) {
+  if (!range.startsWith("catalog:")) return { kind: "none" };
+  const eligible = candidates.filter((c) => c.sourceType === "tarball");
+  if (eligible.length === 0) return { kind: "none" };
+  if (eligible.length === 1) return { kind: "bound", id: eligible[0].id };
+  return { kind: "ambiguous", candidateIds: eligible.map((c) => c.id).sort(cmpStr4) };
+}
 function overrideTargetFor(depName, declaredRange, consumerPath, overrides) {
   let best;
   let bestScore = -1;
@@ -7451,6 +7458,10 @@ function addEdgesFromBlock(builder, srcId, block, kind, index, patchDescriptorIn
         continue;
       }
     }
+    if (dstId === void 0) {
+      const result = catalogResolve(normalizedRange, ladder.candidatesByName.get(depName) ?? []);
+      if (result.kind === "bound") dstId = result.id;
+    }
     if (typeof dstId === "string" && !boundViaOverride && isRegistryRange(normalizedRange)) {
       const bound = nodeNameVersion(dstId);
       const siblings = bound === void 0 ? void 0 : ladder.patchSiblingsByBase.get(bound);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antongolub/lockfile",
-  "version": "0.0.0-snapshot.72",
+  "version": "0.0.0-snapshot.74",
   "private": false,
   "description": "Universal lockfile model and converter for npm, yarn, pnpm, bun",
   "type": "module",