@backstage/cli-node 0.2.19-next.0 → 0.3.0

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.d.ts

@@ -1,6 +1,310 @@
 import { Package } from '@manypkg/get-packages';
 import { JsonValue } from '@backstage/types';
 
+/**
+ * Options for creating a {@link CliAuth} instance.
+ *
+ * @public
+ */
+interface CliAuthCreateOptions {
+    /**
+     * An explicit instance name to resolve. When omitted the currently
+     * selected instance is used.
+     */
+    instanceName?: string;
+}
+/**
+ * Manages authentication state for Backstage CLI commands.
+ *
+ * Reads the currently selected (or explicitly named) auth instance from
+ * the on-disk instance store, transparently refreshes expired access
+ * tokens, and exposes helpers that other CLI modules need to talk to a
+ * Backstage backend.
+ *
+ * @public
+ */
+declare class CliAuth {
+    #private;
+    /**
+     * Resolve the current auth instance and return a ready-to-use
+     * {@link CliAuth} object. Throws when no instance can be found.
+     */
+    static create(options?: CliAuthCreateOptions): Promise<CliAuth>;
+    private constructor();
+    /** Returns the name of the resolved auth instance. */
+    getInstanceName(): string;
+    /** Returns the base URL of the resolved auth instance. */
+    getBaseUrl(): string;
+    /**
+     * Returns a valid access token, refreshing it first if the current
+     * token is expired or about to expire.
+     */
+    getAccessToken(): Promise<string>;
+    /**
+     * Reads a per-instance metadata value previously stored by the
+     * auth module (e.g. `pluginSources`).
+     */
+    getMetadata(key: string): Promise<unknown>;
+    /**
+     * Writes a per-instance metadata value to the on-disk instance store.
+     */
+    setMetadata(key: string, value: unknown): Promise<void>;
+}
+
+/**
+ * A file-system-based cache that tracks successful operations by storing
+ * timestamped marker files.
+ *
+ * @public
+ */
+declare class SuccessCache {
+    #private;
+    /**
+     * Trim any occurrences of the workspace root path from the input string. This
+     * is useful to ensure stable hashes that don't vary based on the workspace
+     * location.
+     */
+    static trimPaths(input: string): string;
+    static create(options: {
+        name: string;
+        basePath?: string;
+    }): SuccessCache;
+    private constructor();
+    read(): Promise<Set<string>>;
+    write(newEntries: Iterable<string>): Promise<void>;
+}
+
+/**
+ * The context provided to a CLI command at the time of execution.
+ *
+ * Contains the parsed arguments and metadata about the command being run.
+ *
+ * @public
+ */
+interface CliCommandContext {
+    /**
+     * The remaining arguments passed to the command after the command path
+     * has been resolved. This includes both positional arguments and flags.
+     *
+     * For example, running `backstage-cli repo test --verbose src/` would
+     * result in `args` being `['--verbose', 'src/']`.
+     */
+    args: string[];
+    /**
+     * Metadata about the command being executed.
+     */
+    info: {
+        /**
+         * The full usage string of the command including the program name,
+         * for example `"backstage-cli repo test"`.
+         */
+        usage: string;
+        /**
+         * The name of the command as defined by its path,
+         * for example `"repo test"`.
+         */
+        name: string;
+    };
+}
+/**
+ * A command definition for a Backstage CLI plugin.
+ *
+ * Each command is identified by a `path` that determines its position in
+ * the command tree. For example, a path of `['repo', 'test']` registers
+ * the command as `backstage-cli repo test`.
+ *
+ * Commands can either provide an `execute` function directly, or use a
+ * `loader` for deferred loading of the implementation. The loader pattern
+ * is recommended for commands with heavy dependencies, as it avoids
+ * loading the implementation until the command is actually invoked.
+ *
+ * @public
+ */
+interface CliCommand {
+    /**
+     * The path segments that define the command's position in the CLI tree.
+     * For example, `['repo', 'test']` maps to `backstage-cli repo test`.
+     */
+    path: string[];
+    /**
+     * A short description of the command, displayed in help output.
+     */
+    description: string;
+    /**
+     * If `true`, the command is deprecated and will be hidden from help output
+     * but can still be invoked.
+     */
+    deprecated?: boolean;
+    /**
+     * If `true`, the command is experimental and will be hidden from help
+     * output but can still be invoked.
+     */
+    experimental?: boolean;
+    /**
+     * The command implementation, either as a direct function or as a loader
+     * that returns the implementation as a default export. The loader form
+     * is useful for deferring heavy imports until the command is invoked.
+     *
+     * @example
+     * Direct execution:
+     * ```
+     * execute: async ({ args }) => { ... }
+     * ```
+     *
+     * @example
+     * Deferred loading:
+     * ```
+     * execute: { loader: () => import('./my-command') }
+     * ```
+     */
+    execute: ((context: CliCommandContext) => Promise<void>) | {
+        loader: () => Promise<{
+            default: (context: CliCommandContext) => Promise<void>;
+        }>;
+    };
+}
+/**
+ * An opaque representation of a Backstage CLI plugin, created
+ * using {@link createCliModule}.
+ *
+ * @public
+ */
+interface CliModule {
+    readonly $$type: '@backstage/CliModule';
+}
+
+/**
+ * Creates a new CLI plugin that provides commands to the Backstage CLI.
+ *
+ * The `init` callback is invoked immediately at creation time and is used
+ * to register commands via the provided registry. The commands are then
+ * made available to the CLI host once the returned promise resolves.
+ *
+ * @example
+ * ```
+ * import { createCliModule } from '@backstage/cli-node';
+ * import packageJson from '../package.json';
+ *
+ * export default createCliModule({
+ *   packageJson,
+ *   init: async reg => {
+ *     reg.addCommand({
+ *       path: ['repo', 'test'],
+ *       description: 'Run tests across the repository',
+ *       execute: { loader: () => import('./commands/test') },
+ *     });
+ *   },
+ * });
+ * ```
+ *
+ * @public
+ */
+declare function createCliModule(options: {
+    /** The `package.json` contents of the plugin package, used to identify the plugin. */
+    packageJson: {
+        name: string;
+    };
+    /**
+     * An initialization callback that registers commands with the CLI.
+     * Called immediately when the plugin is created.
+     */
+    init: (registry: {
+        /** Registers a new command with the CLI. */
+        addCommand: (command: CliCommand) => void;
+    }) => Promise<void>;
+}): CliModule;
+
+/**
+ * Runs a CLI module as a standalone program.
+ *
+ * This helper extracts the commands from a {@link CliModule} and exposes
+ * them as a fully functional CLI with help output and argument parsing.
+ * It is intended to be called from a module package's `bin` entry point
+ * so that the module can be executed directly without being wired into
+ * a larger CLI host.
+ *
+ * @example
+ * ```ts
+ * #!/usr/bin/env node
+ * import { runCliModule } from '@backstage/cli-node';
+ * import cliModule from './index';
+ *
+ * runCliModule({
+ *   module: cliModule,
+ *   name: 'backstage-auth',
+ *   version: require('../package.json').version,
+ * });
+ * ```
+ *
+ * @public
+ */
+declare function runCliModule(options: {
+    /** The CLI module to run. */
+    module: CliModule;
+    /** The program name shown in help output and usage strings. */
+    name: string;
+    /** The version string shown when `--version` is passed. */
+    version?: string;
+}): Promise<void>;
+
+/**
+ * Options for {@link runConcurrentTasks}.
+ *
+ * @public
+ */
+type ConcurrentTasksOptions<TItem> = {
+    /**
+     * Decides the number of concurrent workers by multiplying
+     * this with the configured concurrency.
+     *
+     * Defaults to 1.
+     */
+    concurrencyFactor?: number;
+    items: Iterable<TItem>;
+    worker: (item: TItem) => Promise<void>;
+};
+/**
+ * Runs items through a worker function concurrently across multiple async workers.
+ *
+ * @public
+ */
+declare function runConcurrentTasks<TItem>(options: ConcurrentTasksOptions<TItem>): Promise<void>;
+
+/**
+ * Options for {@link runWorkerQueueThreads}.
+ *
+ * @public
+ */
+type WorkerQueueThreadsOptions<TItem, TResult, TContext> = {
+    /** The items to process */
+    items: Iterable<TItem>;
+    /**
+     * A function that will be called within each worker thread at startup,
+     * which should return the worker function that will be called for each item.
+     *
+     * This function must be defined as an arrow function or using the
+     * function keyword, and must be entirely self contained, not referencing
+     * any variables outside of its scope. This is because the function source
+     * is stringified and evaluated in the worker thread.
+     *
+     * To pass data to the worker, use the `context` option and `items`, but
+     * note that they are both copied by value into the worker thread, except for
+     * types that are explicitly shareable across threads, such as `SharedArrayBuffer`.
+     */
+    workerFactory: (context: TContext) => ((item: TItem) => Promise<TResult>) | Promise<(item: TItem) => Promise<TResult>>;
+    /** Context data supplied to each worker factory */
+    context?: TContext;
+};
+/**
+ * Spawns one or more worker threads using the `worker_threads` module.
+ * Each thread processes one item at a time from the provided `options.items`.
+ *
+ * @public
+ */
+declare function runWorkerQueueThreads<TItem, TResult, TContext>(options: WorkerQueueThreadsOptions<TItem, TResult, TContext>): Promise<{
+    results: TResult[];
+}>;
+
 /**
  * Utilities for working with git.
  *
@@ -19,7 +323,10 @@ declare class GitUtils {
 }
 
 /**
- * Returns try if the current project is a monorepo.
+ * Returns true if the current project is a monorepo.
+ *
+ * Uses a simple presence check on the `workspaces` field. Empty or invalid
+ * workspace config is treated as a monorepo; we do not validate patterns.
  *
  * @public
  */
@@ -30,7 +337,7 @@ declare function isMonoRepo(): Promise<boolean>;
  *
  * @public
  */
-type PackageRole = 'frontend' | 'backend' | 'cli' | 'web-library' | 'node-library' | 'common-library' | 'frontend-plugin' | 'frontend-plugin-module' | 'backend-plugin' | 'backend-plugin-module';
+type PackageRole = 'frontend' | 'backend' | 'cli' | 'cli-module' | 'web-library' | 'node-library' | 'common-library' | 'frontend-plugin' | 'frontend-plugin-module' | 'backend-plugin' | 'backend-plugin-module';
 /**
  * A type of platform that a package can be built for.
  *
@@ -286,11 +593,16 @@ declare class Lockfile {
     static parse(content: string): Lockfile;
     private readonly packages;
     private readonly data;
+    private readonly legacy;
     private constructor();
     /** Returns the name of all packages available in the lockfile */
     get(name: string): LockfileQueryEntry[] | undefined;
     /** Get the entries for a single package in the lockfile */
     keys(): IterableIterator<string>;
+    /**
+     * Serialize the lockfile back to a string.
+     */
+    toString(): string;
     /**
      * Creates a simplified dependency graph from the lockfile data, where each
      * key is a package, and the value is a set of all packages that it depends on
@@ -309,62 +621,13 @@ declare class Lockfile {
 }
 
 /**
- * Options for {@link runConcurrentTasks}.
- *
- * @public
- */
-type ConcurrentTasksOptions<TItem> = {
-    /**
-     * Decides the number of concurrent workers by multiplying
-     * this with the configured concurrency.
-     *
-     * Defaults to 1.
-     */
-    concurrencyFactor?: number;
-    items: Iterable<TItem>;
-    worker: (item: TItem) => Promise<void>;
-};
-/**
- * Runs items through a worker function concurrently across multiple async workers.
- *
- * @public
- */
-declare function runConcurrentTasks<TItem>(options: ConcurrentTasksOptions<TItem>): Promise<void>;
-
-/**
- * Options for {@link runWorkerQueueThreads}.
- *
- * @public
- */
-type WorkerQueueThreadsOptions<TItem, TResult, TContext> = {
-    /** The items to process */
-    items: Iterable<TItem>;
-    /**
-     * A function that will be called within each worker thread at startup,
-     * which should return the worker function that will be called for each item.
-     *
-     * This function must be defined as an arrow function or using the
-     * function keyword, and must be entirely self contained, not referencing
-     * any variables outside of its scope. This is because the function source
-     * is stringified and evaluated in the worker thread.
-     *
-     * To pass data to the worker, use the `context` option and `items`, but
-     * note that they are both copied by value into the worker thread, except for
-     * types that are explicitly shareable across threads, such as `SharedArrayBuffer`.
-     */
-    workerFactory: (context: TContext) => ((item: TItem) => Promise<TResult>) | Promise<(item: TItem) => Promise<TResult>>;
-    /** Context data supplied to each worker factory */
-    context?: TContext;
-};
-/**
- * Spawns one or more worker threads using the `worker_threads` module.
- * Each thread processes one item at a time from the provided `options.items`.
+ * Detects whether the Backstage Yarn plugin is installed in the given workspace directory.
  *
+ * @param workspaceDir - The workspace root directory to check. Defaults to the target root.
+ * @returns Promise resolving to true if the plugin is installed, false otherwise
  * @public
  */
-declare function runWorkerQueueThreads<TItem, TResult, TContext>(options: WorkerQueueThreadsOptions<TItem, TResult, TContext>): Promise<{
-    results: TResult[];
-}>;
+declare function hasBackstageYarnPlugin(workspaceDir?: string): Promise<boolean>;
 
-export { GitUtils, Lockfile, PackageGraph, PackageRoles, isMonoRepo, packageFeatureType, runConcurrentTasks, runWorkerQueueThreads };
-export type { BackstagePackage, BackstagePackageFeatureType, BackstagePackageJson, ConcurrentTasksOptions, LockfileDiff, LockfileDiffEntry, LockfileQueryEntry, PackageGraphNode, PackageOutputType, PackagePlatform, PackageRole, PackageRoleInfo, WorkerQueueThreadsOptions };
+export { CliAuth, GitUtils, Lockfile, PackageGraph, PackageRoles, SuccessCache, createCliModule, hasBackstageYarnPlugin, isMonoRepo, packageFeatureType, runCliModule, runConcurrentTasks, runWorkerQueueThreads };
+export type { BackstagePackage, BackstagePackageFeatureType, BackstagePackageJson, CliAuthCreateOptions, CliCommand, CliCommandContext, CliModule, ConcurrentTasksOptions, LockfileDiff, LockfileDiffEntry, LockfileQueryEntry, PackageGraphNode, PackageOutputType, PackagePlatform, PackageRole, PackageRoleInfo, WorkerQueueThreadsOptions };

package/dist/monorepo/Lockfile.cjs.js

@@ -1,6 +1,7 @@
 'use strict';
 
 var parsers = require('@yarnpkg/parsers');
+var lockfile = require('@yarnpkg/lockfile');
 var crypto = require('node:crypto');
 var fs = require('fs-extra');
 
@@ -10,6 +11,14 @@ var crypto__default = /*#__PURE__*/_interopDefaultCompat(crypto);
 var fs__default = /*#__PURE__*/_interopDefaultCompat(fs);
 
 const ENTRY_PATTERN = /^((?:@[^/]+\/)?[^@/]+)@(.+)$/;
+const NEW_HEADER = `${[
+  `# This file is generated by running "yarn install" inside your project.
+`,
+  `# Manual changes might be lost - proceed with caution!
+`
+].join(``)}
+`;
+const LEGACY_REGEX = /^(#.*(\r?\n))*?#\s+yarn\s+lockfile\s+v1\r?\n/i;
 const SPECIAL_OBJECT_KEYS = [
   `__metadata`,
   `version`,
@@ -34,6 +43,7 @@ class Lockfile {
    * @public
    */
   static parse(content) {
+    const legacy = LEGACY_REGEX.test(content);
     let data;
     try {
       data = parsers.parseSyml(content);
@@ -62,13 +72,15 @@ class Lockfile {
         queries.push({ range, version: value.version, dataKey: key });
       }
     }
-    return new Lockfile(packages, data);
+    return new Lockfile(packages, data, legacy);
   }
   packages;
   data;
-  constructor(packages, data) {
+  legacy;
+  constructor(packages, data, legacy = false) {
     this.packages = packages;
     this.data = data;
+    this.legacy = legacy;
   }
   /** Returns the name of all packages available in the lockfile */
   get(name) {
@@ -78,6 +90,12 @@ class Lockfile {
   keys() {
     return this.packages.keys();
   }
+  /**
+   * Serialize the lockfile back to a string.
+   */
+  toString() {
+    return this.legacy ? lockfile.stringify(this.data) : NEW_HEADER + parsers.stringifySyml(this.data);
+  }
   /**
    * Creates a simplified dependency graph from the lockfile data, where each
    * key is a package, and the value is a set of all packages that it depends on

package/dist/monorepo/Lockfile.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"Lockfile.cjs.js","sources":["../../src/monorepo/Lockfile.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { parseSyml } from '@yarnpkg/parsers';\nimport crypto from 'node:crypto';\nimport fs from 'fs-extra';\n\nconst ENTRY_PATTERN = /^((?:@[^/]+\\/)?[^@/]+)@(.+)$/;\n\n/** @internal */\ntype LockfileData = {\n  [entry: string]: {\n    version: string;\n    resolved?: string;\n    integrity?: string /* old */;\n    checksum?: string /* new */;\n    dependencies?: { [name: string]: string };\n    peerDependencies?: { [name: string]: string };\n  };\n};\n\n/**\n * A single entry in a {@link Lockfile}.\n *\n * @public\n */\nexport type LockfileQueryEntry = {\n  range: string;\n  version: string;\n  dataKey: string;\n};\n\n/**\n * An entry for a single difference between two {@link Lockfile}s.\n *\n * @public\n */\nexport type LockfileDiffEntry = {\n  name: string;\n  range: string;\n};\n\n/**\n * Represents the difference between two {@link Lockfile}s.\n *\n * @public\n */\nexport type LockfileDiff = {\n  added: LockfileDiffEntry[];\n  changed: LockfileDiffEntry[];\n  removed: LockfileDiffEntry[];\n};\n\n// these are special top level yarn keys.\n// https://github.com/yarnpkg/berry/blob/9bd61fbffb83d0b8166a9cc26bec3a58743aa453/packages/yarnpkg-parsers/sources/syml.ts#L9\nconst SPECIAL_OBJECT_KEYS = [\n  `__metadata`,\n  `version`,\n  `resolution`,\n  `dependencies`,\n  `peerDependencies`,\n  `dependenciesMeta`,\n  `peerDependenciesMeta`,\n  `binaries`,\n];\n\n/**\n * Represents a package manager lockfile.\n *\n * @public\n */\nexport class Lockfile {\n  /**\n   * Load a {@link Lockfile} from a file path.\n   */\n  static async load(path: string): Promise<Lockfile> {\n    const lockfileContents = await fs.readFile(path, 'utf8');\n    return Lockfile.parse(lockfileContents);\n  }\n\n  /**\n   * Parse lockfile contents into a {@link Lockfile}.\n   *\n   * @public\n   */\n  static parse(content: string): Lockfile {\n    let data: LockfileData;\n    try {\n      data = parseSyml(content);\n    } catch (err) {\n      throw new Error(`Failed yarn.lock parse, ${err}`);\n    }\n\n    const packages = new Map<string, LockfileQueryEntry[]>();\n\n    for (const [key, value] of Object.entries(data)) {\n      if (SPECIAL_OBJECT_KEYS.includes(key)) continue;\n\n      const [, name, ranges] = ENTRY_PATTERN.exec(key) ?? [];\n      if (!name) {\n        throw new Error(`Failed to parse yarn.lock entry '${key}'`);\n      }\n\n      let queries = packages.get(name);\n      if (!queries) {\n        queries = [];\n        packages.set(name, queries);\n      }\n      for (let range of ranges.split(/\\s*,\\s*/)) {\n        if (range.startsWith(`${name}@`)) {\n          range = range.slice(`${name}@`.length);\n        }\n        if (range.startsWith('npm:')) {\n          range = range.slice('npm:'.length);\n        }\n        queries.push({ range, version: value.version, dataKey: key });\n      }\n    }\n\n    return new Lockfile(packages, data);\n  }\n\n  private readonly packages: Map<string, LockfileQueryEntry[]>;\n  private readonly data: LockfileData;\n\n  private constructor(\n    packages: Map<string, LockfileQueryEntry[]>,\n    data: LockfileData,\n  ) {\n    this.packages = packages;\n    this.data = data;\n  }\n\n  /** Returns the name of all packages available in the lockfile */\n  get(name: string): LockfileQueryEntry[] | undefined {\n    return this.packages.get(name);\n  }\n\n  /** Get the entries for a single package in the lockfile */\n  keys(): IterableIterator<string> {\n    return this.packages.keys();\n  }\n\n  /**\n   * Creates a simplified dependency graph from the lockfile data, where each\n   * key is a package, and the value is a set of all packages that it depends on\n   * across all versions.\n   */\n  createSimplifiedDependencyGraph(): Map<string, Set<string>> {\n    const graph = new Map<string, Set<string>>();\n\n    for (const [name, entries] of this.packages) {\n      const dependencies = new Set(\n        entries.flatMap(e => {\n          const data = this.data[e.dataKey];\n          return [\n            ...Object.keys(data?.dependencies ?? {}),\n            ...Object.keys(data?.peerDependencies ?? {}),\n          ];\n        }),\n      );\n      graph.set(name, dependencies);\n    }\n\n    return graph;\n  }\n\n  /**\n   * Diff with another lockfile, returning entries that have been\n   * added, changed, and removed compared to the other lockfile.\n   */\n  diff(otherLockfile: Lockfile): LockfileDiff {\n    const diff = {\n      added: new Array<{ name: string; range: string }>(),\n      changed: new Array<{ name: string; range: string }>(),\n      removed: new Array<{ name: string; range: string }>(),\n    };\n\n    // Keeps track of packages that only exist in this lockfile\n    const remainingOldNames = new Set(this.packages.keys());\n\n    for (const [name, otherQueries] of otherLockfile.packages) {\n      remainingOldNames.delete(name);\n\n      const thisQueries = this.packages.get(name);\n      // If the packages doesn't exist in this lockfile, add all entries\n      if (!thisQueries) {\n        diff.removed.push(...otherQueries.map(q => ({ name, range: q.range })));\n        continue;\n      }\n\n      const remainingOldRanges = new Set(thisQueries.map(q => q.range));\n\n      for (const otherQuery of otherQueries) {\n        remainingOldRanges.delete(otherQuery.range);\n\n        const thisQuery = thisQueries.find(q => q.range === otherQuery.range);\n        if (!thisQuery) {\n          diff.removed.push({ name, range: otherQuery.range });\n          continue;\n        }\n\n        const otherPkg = otherLockfile.data[otherQuery.dataKey];\n        const thisPkg = this.data[thisQuery.dataKey];\n        if (otherPkg && thisPkg) {\n          const thisCheck = thisPkg.integrity || thisPkg.checksum;\n          const otherCheck = otherPkg.integrity || otherPkg.checksum;\n          if (thisCheck !== otherCheck) {\n            diff.changed.push({ name, range: otherQuery.range });\n          }\n        }\n      }\n\n      for (const thisRange of remainingOldRanges) {\n        diff.added.push({ name, range: thisRange });\n      }\n    }\n\n    for (const name of remainingOldNames) {\n      const queries = this.packages.get(name) ?? [];\n      diff.added.push(...queries.map(q => ({ name, range: q.range })));\n    }\n\n    return diff;\n  }\n\n  /**\n   * Generates a sha1 hex hash of the dependency graph for a package.\n   */\n  getDependencyTreeHash(startName: string): string {\n    if (!this.packages.has(startName)) {\n      throw new Error(`Package '${startName}' not found in lockfile`);\n    }\n\n    const hash = crypto.createHash('sha1');\n\n    const queue = [startName];\n    const seen = new Set<string>();\n\n    while (queue.length > 0) {\n      const name = queue.pop()!;\n\n      if (seen.has(name)) {\n        continue;\n      }\n      seen.add(name);\n\n      const entries = this.packages.get(name);\n      if (!entries) {\n        continue; // In case of missing optional peer dependencies\n      }\n\n      hash.update(`pkg:${name}`);\n      hash.update('\\0');\n\n      // TODO(Rugvip): This uses the same simplified lookup as createSimplifiedDependencyGraph()\n      //               we could match version queries to make the resulting tree a bit smaller.\n      const deps = new Array<string>();\n      for (const entry of entries) {\n        // We're not being particular about stable ordering here. If the lockfile ordering changes, so will likely hash.\n        hash.update(entry.version);\n\n        const data = this.data[entry.dataKey];\n        if (!data) {\n          continue;\n        }\n\n        const checksum = data.checksum || data.integrity;\n        if (checksum) {\n          hash.update('#');\n          hash.update(checksum);\n        }\n\n        hash.update(' ');\n\n        deps.push(...Object.keys(data.dependencies ?? {}));\n        deps.push(...Object.keys(data.peerDependencies ?? {}));\n      }\n\n      queue.push(...new Set(deps));\n    }\n\n    return hash.digest('hex');\n  }\n}\n"],"names":["fs","parseSyml","crypto"],"mappings":";;;;;;;;;;;AAoBA,MAAM,aAAA,GAAgB,8BAAA;AAgDtB,MAAM,mBAAA,GAAsB;AAAA,EAC1B,CAAA,UAAA,CAAA;AAAA,EACA,CAAA,OAAA,CAAA;AAAA,EACA,CAAA,UAAA,CAAA;AAAA,EACA,CAAA,YAAA,CAAA;AAAA,EACA,CAAA,gBAAA,CAAA;AAAA,EACA,CAAA,gBAAA,CAAA;AAAA,EACA,CAAA,oBAAA,CAAA;AAAA,EACA,CAAA,QAAA;AACF,CAAA;AAOO,MAAM,QAAA,CAAS;AAAA;AAAA;AAAA;AAAA,EAIpB,aAAa,KAAK,IAAA,EAAiC;AACjD,IAAA,MAAM,gBAAA,GAAmB,MAAMA,mBAAA,CAAG,QAAA,CAAS,MAAM,MAAM,CAAA;AACvD,IAAA,OAAO,QAAA,CAAS,MAAM,gBAAgB,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,MAAM,OAAA,EAA2B;AACtC,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAOC,kBAAU,OAAO,CAAA;AAAA,IAC1B,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD;AAEA,IAAA,MAAM,QAAA,uBAAe,GAAA,EAAkC;AAEvD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC/C,MAAA,IAAI,mBAAA,CAAoB,QAAA,CAAS,GAAG,CAAA,EAAG;AAEvC,MAAA,MAAM,GAAG,IAAA,EAAM,MAAM,IAAI,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,EAAC;AACrD,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,MAC5D;AAEA,MAAA,IAAI,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA,OAAA,GAAU,EAAC;AACX,QAAA,QAAA,CAAS,GAAA,CAAI,MAAM,OAAO,CAAA;AAAA,MAC5B;AACA,MAAA,KAAA,IAAS,KAAA,IAAS,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA,EAAG;AACzC,QAAA,IAAI,KAAA,CAAM,UAAA,CAAW,CAAA,EAAG,IAAI,GAAG,CAAA,EAAG;AAChC,UAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,IAAI,IAAI,MAAM,CAAA;AAAA,QACvC;AACA,QAAA,IAAI,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA,EAAG;AAC5B,UAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAAA,QACnC;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,MAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,MAC9D;AAAA,IACF;AAEA,IAAA,OAAO,IAAI,QAAA,CAAS,QAAA,EAAU,IAAI,CAAA;AAAA,EACpC;AAAA,EAEiB,QAAA;AAAA,EACA,IAAA;AAAA,EAET,WAAA,CACN,UACA,IAAA,EACA;AACA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,IAAA,EAAgD;AAClD,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,IAAA,GAAiC;AAC/B,IAAA,OAAO,IAAA,CAAK,SAAS,IAAA,EAAK;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,+BAAA,GAA4D;AAC1D,IAAA,MAAM,KAAA,uBAAY,GAAA,EAAyB;AAE3C,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,CAAA,IAAK,KAAK,QAAA,EAAU;AAC3C,MAAA,MAAM,eAAe,IAAI,GAAA;AAAA,QACvB,OAAA,CAAQ,QAAQ,CAAA,CAAA,KAAK;AACnB,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAChC,UAAA,OAAO;AAAA,YACL,GAAG,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,YAAA,IAAgB,EAAE,CAAA;AAAA,YACvC,GAAG,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,gBAAA,IAAoB,EAAE;AAAA,WAC7C;AAAA,QACF,CAAC;AAAA,OACH;AACA,MAAA,KAAA,CAAM,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,IAC9B;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAK,aAAA,EAAuC;AAC1C,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,KAAA,EAAO,IAAI,KAAA,EAAuC;AAAA,MAClD,OAAA,EAAS,IAAI,KAAA,EAAuC;AAAA,MACpD,OAAA,EAAS,IAAI,KAAA;AAAuC,KACtD;AAGA,IAAA,MAAM,oBAAoB,IAAI,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAEtD,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,YAAY,CAAA,IAAK,cAAc,QAAA,EAAU;AACzD,MAAA,iBAAA,CAAkB,OAAO,IAAI,CAAA;AAE7B,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAE1C,MAAA,IAAI,CAAC,WAAA,EAAa;AAChB,QAAA,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,GAAG,YAAA,CAAa,GAAA,CAAI,CAAA,CAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,CAAE,CAAC,CAAA;AACtE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,kBAAA,GAAqB,IAAI,GAAA,CAAI,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,KAAK,CAAC,CAAA;AAEhE,MAAA,KAAA,MAAW,cAAc,YAAA,EAAc;AACrC,QAAA,kBAAA,CAAmB,MAAA,CAAO,WAAW,KAAK,CAAA;AAE1C,QAAA,MAAM,YAAY,WAAA,CAAY,IAAA,CAAK,OAAK,CAAA,CAAE,KAAA,KAAU,WAAW,KAAK,CAAA;AACpE,QAAA,IAAI,CAAC,SAAA,EAAW;AACd,UAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,UAAA,CAAW,OAAO,CAAA;AACnD,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,QAAA,GAAW,aAAA,CAAc,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA;AACtD,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAC3C,QAAA,IAAI,YAAY,OAAA,EAAS;AACvB,UAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,QAAA;AAC/C,UAAA,MAAM,UAAA,GAAa,QAAA,CAAS,SAAA,IAAa,QAAA,CAAS,QAAA;AAClD,UAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,YAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,UAAA,CAAW,OAAO,CAAA;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAEA,MAAA,KAAA,MAAW,aAAa,kBAAA,EAAoB;AAC1C,QAAA,IAAA,CAAK,MAAM,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,WAAW,CAAA;AAAA,MAC5C;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAQ,iBAAA,EAAmB;AACpC,MAAA,MAAM,UAAU,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,KAAK,EAAC;AAC5C,MAAA,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,CAAE,CAAC,CAAA;AAAA,IACjE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,sBAAsB,SAAA,EAA2B;AAC/C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA,EAAG;AACjC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,SAAS,CAAA,uBAAA,CAAyB,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAOC,uBAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAErC,IAAA,MAAM,KAAA,GAAQ,CAAC,SAAS,CAAA;AACxB,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAE7B,IAAA,OAAO,KAAA,CAAM,SAAS,CAAA,EAAG;AACvB,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,EAAI;AAEvB,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAClB,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AAEb,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AACtC,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,MAAA,CAAO,CAAA,IAAA,EAAO,IAAI,CAAA,CAAE,CAAA;AACzB,MAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAIhB,MAAA,MAAM,IAAA,GAAO,IAAI,KAAA,EAAc;AAC/B,MAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAE3B,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,OAAO,CAAA;AAEzB,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACpC,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,SAAA;AACvC,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,IAAA,CAAK,OAAO,QAAQ,CAAA;AAAA,QACtB;AAEA,QAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AAEf,QAAA,IAAA,CAAK,IAAA,CAAK,GAAG,MAAA,CAAO,IAAA,CAAK,KAAK,YAAA,IAAgB,EAAE,CAAC,CAAA;AACjD,QAAA,IAAA,CAAK,IAAA,CAAK,GAAG,MAAA,CAAO,IAAA,CAAK,KAAK,gBAAA,IAAoB,EAAE,CAAC,CAAA;AAAA,MACvD;AAEA,MAAA,KAAA,CAAM,IAAA,CAAK,GAAG,IAAI,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,IAAA,CAAK,OAAO,KAAK,CAAA;AAAA,EAC1B;AACF;;;;"}
+{"version":3,"file":"Lockfile.cjs.js","sources":["../../src/monorepo/Lockfile.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { parseSyml, stringifySyml } from '@yarnpkg/parsers';\nimport { stringify as legacyStringifyLockfile } from '@yarnpkg/lockfile';\nimport crypto from 'node:crypto';\nimport fs from 'fs-extra';\n\nconst ENTRY_PATTERN = /^((?:@[^/]+\\/)?[^@/]+)@(.+)$/;\n\n// https://github.com/yarnpkg/berry/blob/0c5974f193a9397630e9aee2b3876cca62611149/packages/yarnpkg-core/sources/Project.ts#L1741-L1746\nconst NEW_HEADER = `${[\n  `# This file is generated by running \"yarn install\" inside your project.\\n`,\n  `# Manual changes might be lost - proceed with caution!\\n`,\n].join(``)}\\n`;\n\n// https://github.com/yarnpkg/berry/blob/0c5974f193a9397630e9aee2b3876cca62611149/packages/yarnpkg-parsers/sources/syml.ts#L136\nconst LEGACY_REGEX = /^(#.*(\\r?\\n))*?#\\s+yarn\\s+lockfile\\s+v1\\r?\\n/i;\n\n/** @internal */\ntype LockfileData = {\n  [entry: string]: {\n    version: string;\n    resolved?: string;\n    integrity?: string /* old */;\n    checksum?: string /* new */;\n    dependencies?: { [name: string]: string };\n    peerDependencies?: { [name: string]: string };\n  };\n};\n\n/**\n * A single entry in a {@link Lockfile}.\n *\n * @public\n */\nexport type LockfileQueryEntry = {\n  range: string;\n  version: string;\n  dataKey: string;\n};\n\n/**\n * An entry for a single difference between two {@link Lockfile}s.\n *\n * @public\n */\nexport type LockfileDiffEntry = {\n  name: string;\n  range: string;\n};\n\n/**\n * Represents the difference between two {@link Lockfile}s.\n *\n * @public\n */\nexport type LockfileDiff = {\n  added: LockfileDiffEntry[];\n  changed: LockfileDiffEntry[];\n  removed: LockfileDiffEntry[];\n};\n\n// these are special top level yarn keys.\n// https://github.com/yarnpkg/berry/blob/9bd61fbffb83d0b8166a9cc26bec3a58743aa453/packages/yarnpkg-parsers/sources/syml.ts#L9\nconst SPECIAL_OBJECT_KEYS = [\n  `__metadata`,\n  `version`,\n  `resolution`,\n  `dependencies`,\n  `peerDependencies`,\n  `dependenciesMeta`,\n  `peerDependenciesMeta`,\n  `binaries`,\n];\n\n/**\n * Represents a package manager lockfile.\n *\n * @public\n */\nexport class Lockfile {\n  /**\n   * Load a {@link Lockfile} from a file path.\n   */\n  static async load(path: string): Promise<Lockfile> {\n    const lockfileContents = await fs.readFile(path, 'utf8');\n    return Lockfile.parse(lockfileContents);\n  }\n\n  /**\n   * Parse lockfile contents into a {@link Lockfile}.\n   *\n   * @public\n   */\n  static parse(content: string): Lockfile {\n    const legacy = LEGACY_REGEX.test(content);\n\n    let data: LockfileData;\n    try {\n      data = parseSyml(content);\n    } catch (err) {\n      throw new Error(`Failed yarn.lock parse, ${err}`);\n    }\n\n    const packages = new Map<string, LockfileQueryEntry[]>();\n\n    for (const [key, value] of Object.entries(data)) {\n      if (SPECIAL_OBJECT_KEYS.includes(key)) continue;\n\n      const [, name, ranges] = ENTRY_PATTERN.exec(key) ?? [];\n      if (!name) {\n        throw new Error(`Failed to parse yarn.lock entry '${key}'`);\n      }\n\n      let queries = packages.get(name);\n      if (!queries) {\n        queries = [];\n        packages.set(name, queries);\n      }\n      for (let range of ranges.split(/\\s*,\\s*/)) {\n        if (range.startsWith(`${name}@`)) {\n          range = range.slice(`${name}@`.length);\n        }\n        if (range.startsWith('npm:')) {\n          range = range.slice('npm:'.length);\n        }\n        queries.push({ range, version: value.version, dataKey: key });\n      }\n    }\n\n    return new Lockfile(packages, data, legacy);\n  }\n\n  private readonly packages: Map<string, LockfileQueryEntry[]>;\n  private readonly data: LockfileData;\n  private readonly legacy: boolean;\n\n  private constructor(\n    packages: Map<string, LockfileQueryEntry[]>,\n    data: LockfileData,\n    legacy: boolean = false,\n  ) {\n    this.packages = packages;\n    this.data = data;\n    this.legacy = legacy;\n  }\n\n  /** Returns the name of all packages available in the lockfile */\n  get(name: string): LockfileQueryEntry[] | undefined {\n    return this.packages.get(name);\n  }\n\n  /** Get the entries for a single package in the lockfile */\n  keys(): IterableIterator<string> {\n    return this.packages.keys();\n  }\n\n  /**\n   * Serialize the lockfile back to a string.\n   */\n  toString(): string {\n    return this.legacy\n      ? legacyStringifyLockfile(this.data)\n      : NEW_HEADER + stringifySyml(this.data);\n  }\n\n  /**\n   * Creates a simplified dependency graph from the lockfile data, where each\n   * key is a package, and the value is a set of all packages that it depends on\n   * across all versions.\n   */\n  createSimplifiedDependencyGraph(): Map<string, Set<string>> {\n    const graph = new Map<string, Set<string>>();\n\n    for (const [name, entries] of this.packages) {\n      const dependencies = new Set(\n        entries.flatMap(e => {\n          const data = this.data[e.dataKey];\n          return [\n            ...Object.keys(data?.dependencies ?? {}),\n            ...Object.keys(data?.peerDependencies ?? {}),\n          ];\n        }),\n      );\n      graph.set(name, dependencies);\n    }\n\n    return graph;\n  }\n\n  /**\n   * Diff with another lockfile, returning entries that have been\n   * added, changed, and removed compared to the other lockfile.\n   */\n  diff(otherLockfile: Lockfile): LockfileDiff {\n    const diff = {\n      added: new Array<{ name: string; range: string }>(),\n      changed: new Array<{ name: string; range: string }>(),\n      removed: new Array<{ name: string; range: string }>(),\n    };\n\n    // Keeps track of packages that only exist in this lockfile\n    const remainingOldNames = new Set(this.packages.keys());\n\n    for (const [name, otherQueries] of otherLockfile.packages) {\n      remainingOldNames.delete(name);\n\n      const thisQueries = this.packages.get(name);\n      // If the packages doesn't exist in this lockfile, add all entries\n      if (!thisQueries) {\n        diff.removed.push(...otherQueries.map(q => ({ name, range: q.range })));\n        continue;\n      }\n\n      const remainingOldRanges = new Set(thisQueries.map(q => q.range));\n\n      for (const otherQuery of otherQueries) {\n        remainingOldRanges.delete(otherQuery.range);\n\n        const thisQuery = thisQueries.find(q => q.range === otherQuery.range);\n        if (!thisQuery) {\n          diff.removed.push({ name, range: otherQuery.range });\n          continue;\n        }\n\n        const otherPkg = otherLockfile.data[otherQuery.dataKey];\n        const thisPkg = this.data[thisQuery.dataKey];\n        if (otherPkg && thisPkg) {\n          const thisCheck = thisPkg.integrity || thisPkg.checksum;\n          const otherCheck = otherPkg.integrity || otherPkg.checksum;\n          if (thisCheck !== otherCheck) {\n            diff.changed.push({ name, range: otherQuery.range });\n          }\n        }\n      }\n\n      for (const thisRange of remainingOldRanges) {\n        diff.added.push({ name, range: thisRange });\n      }\n    }\n\n    for (const name of remainingOldNames) {\n      const queries = this.packages.get(name) ?? [];\n      diff.added.push(...queries.map(q => ({ name, range: q.range })));\n    }\n\n    return diff;\n  }\n\n  /**\n   * Generates a sha1 hex hash of the dependency graph for a package.\n   */\n  getDependencyTreeHash(startName: string): string {\n    if (!this.packages.has(startName)) {\n      throw new Error(`Package '${startName}' not found in lockfile`);\n    }\n\n    const hash = crypto.createHash('sha1');\n\n    const queue = [startName];\n    const seen = new Set<string>();\n\n    while (queue.length > 0) {\n      const name = queue.pop()!;\n\n      if (seen.has(name)) {\n        continue;\n      }\n      seen.add(name);\n\n      const entries = this.packages.get(name);\n      if (!entries) {\n        continue; // In case of missing optional peer dependencies\n      }\n\n      hash.update(`pkg:${name}`);\n      hash.update('\\0');\n\n      // TODO(Rugvip): This uses the same simplified lookup as createSimplifiedDependencyGraph()\n      //               we could match version queries to make the resulting tree a bit smaller.\n      const deps = new Array<string>();\n      for (const entry of entries) {\n        // We're not being particular about stable ordering here. If the lockfile ordering changes, so will likely hash.\n        hash.update(entry.version);\n\n        const data = this.data[entry.dataKey];\n        if (!data) {\n          continue;\n        }\n\n        const checksum = data.checksum || data.integrity;\n        if (checksum) {\n          hash.update('#');\n          hash.update(checksum);\n        }\n\n        hash.update(' ');\n\n        deps.push(...Object.keys(data.dependencies ?? {}));\n        deps.push(...Object.keys(data.peerDependencies ?? {}));\n      }\n\n      queue.push(...new Set(deps));\n    }\n\n    return hash.digest('hex');\n  }\n}\n"],"names":["fs","parseSyml","legacyStringifyLockfile","stringifySyml","crypto"],"mappings":";;;;;;;;;;;;AAqBA,MAAM,aAAA,GAAgB,8BAAA;AAGtB,MAAM,aAAa,CAAA,EAAG;AAAA,EACpB,CAAA;AAAA,CAAA;AAAA,EACA,CAAA;AAAA;AACF,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC;AAAA,CAAA;AAGV,MAAM,YAAA,GAAe,+CAAA;AAgDrB,MAAM,mBAAA,GAAsB;AAAA,EAC1B,CAAA,UAAA,CAAA;AAAA,EACA,CAAA,OAAA,CAAA;AAAA,EACA,CAAA,UAAA,CAAA;AAAA,EACA,CAAA,YAAA,CAAA;AAAA,EACA,CAAA,gBAAA,CAAA;AAAA,EACA,CAAA,gBAAA,CAAA;AAAA,EACA,CAAA,oBAAA,CAAA;AAAA,EACA,CAAA,QAAA;AACF,CAAA;AAOO,MAAM,QAAA,CAAS;AAAA;AAAA;AAAA;AAAA,EAIpB,aAAa,KAAK,IAAA,EAAiC;AACjD,IAAA,MAAM,gBAAA,GAAmB,MAAMA,mBAAA,CAAG,QAAA,CAAS,MAAM,MAAM,CAAA;AACvD,IAAA,OAAO,QAAA,CAAS,MAAM,gBAAgB,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,MAAM,OAAA,EAA2B;AACtC,IAAA,MAAM,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA;AAExC,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAOC,kBAAU,OAAO,CAAA;AAAA,IAC1B,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD;AAEA,IAAA,MAAM,QAAA,uBAAe,GAAA,EAAkC;AAEvD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC/C,MAAA,IAAI,mBAAA,CAAoB,QAAA,CAAS,GAAG,CAAA,EAAG;AAEvC,MAAA,MAAM,GAAG,IAAA,EAAM,MAAM,IAAI,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,EAAC;AACrD,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,MAC5D;AAEA,MAAA,IAAI,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA,OAAA,GAAU,EAAC;AACX,QAAA,QAAA,CAAS,GAAA,CAAI,MAAM,OAAO,CAAA;AAAA,MAC5B;AACA,MAAA,KAAA,IAAS,KAAA,IAAS,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA,EAAG;AACzC,QAAA,IAAI,KAAA,CAAM,UAAA,CAAW,CAAA,EAAG,IAAI,GAAG,CAAA,EAAG;AAChC,UAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,IAAI,IAAI,MAAM,CAAA;AAAA,QACvC;AACA,QAAA,IAAI,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA,EAAG;AAC5B,UAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAAA,QACnC;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,MAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,MAC9D;AAAA,IACF;AAEA,IAAA,OAAO,IAAI,QAAA,CAAS,QAAA,EAAU,IAAA,EAAM,MAAM,CAAA;AAAA,EAC5C;AAAA,EAEiB,QAAA;AAAA,EACA,IAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,CACN,QAAA,EACA,IAAA,EACA,MAAA,GAAkB,KAAA,EAClB;AACA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,IAAI,IAAA,EAAgD;AAClD,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,IAAA,GAAiC;AAC/B,IAAA,OAAO,IAAA,CAAK,SAAS,IAAA,EAAK;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,SACRC,kBAAA,CAAwB,IAAA,CAAK,IAAI,CAAA,GACjC,UAAA,GAAaC,qBAAA,CAAc,IAAA,CAAK,IAAI,CAAA;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,+BAAA,GAA4D;AAC1D,IAAA,MAAM,KAAA,uBAAY,GAAA,EAAyB;AAE3C,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,CAAA,IAAK,KAAK,QAAA,EAAU;AAC3C,MAAA,MAAM,eAAe,IAAI,GAAA;AAAA,QACvB,OAAA,CAAQ,QAAQ,CAAA,CAAA,KAAK;AACnB,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAChC,UAAA,OAAO;AAAA,YACL,GAAG,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,YAAA,IAAgB,EAAE,CAAA;AAAA,YACvC,GAAG,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,gBAAA,IAAoB,EAAE;AAAA,WAC7C;AAAA,QACF,CAAC;AAAA,OACH;AACA,MAAA,KAAA,CAAM,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,IAC9B;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAK,aAAA,EAAuC;AAC1C,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,KAAA,EAAO,IAAI,KAAA,EAAuC;AAAA,MAClD,OAAA,EAAS,IAAI,KAAA,EAAuC;AAAA,MACpD,OAAA,EAAS,IAAI,KAAA;AAAuC,KACtD;AAGA,IAAA,MAAM,oBAAoB,IAAI,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAEtD,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,YAAY,CAAA,IAAK,cAAc,QAAA,EAAU;AACzD,MAAA,iBAAA,CAAkB,OAAO,IAAI,CAAA;AAE7B,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAE1C,MAAA,IAAI,CAAC,WAAA,EAAa;AAChB,QAAA,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,GAAG,YAAA,CAAa,GAAA,CAAI,CAAA,CAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,CAAE,CAAC,CAAA;AACtE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,kBAAA,GAAqB,IAAI,GAAA,CAAI,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,KAAK,CAAC,CAAA;AAEhE,MAAA,KAAA,MAAW,cAAc,YAAA,EAAc;AACrC,QAAA,kBAAA,CAAmB,MAAA,CAAO,WAAW,KAAK,CAAA;AAE1C,QAAA,MAAM,YAAY,WAAA,CAAY,IAAA,CAAK,OAAK,CAAA,CAAE,KAAA,KAAU,WAAW,KAAK,CAAA;AACpE,QAAA,IAAI,CAAC,SAAA,EAAW;AACd,UAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,UAAA,CAAW,OAAO,CAAA;AACnD,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,QAAA,GAAW,aAAA,CAAc,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA;AACtD,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAC3C,QAAA,IAAI,YAAY,OAAA,EAAS;AACvB,UAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,QAAA;AAC/C,UAAA,MAAM,UAAA,GAAa,QAAA,CAAS,SAAA,IAAa,QAAA,CAAS,QAAA;AAClD,UAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,YAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,UAAA,CAAW,OAAO,CAAA;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAEA,MAAA,KAAA,MAAW,aAAa,kBAAA,EAAoB;AAC1C,QAAA,IAAA,CAAK,MAAM,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,WAAW,CAAA;AAAA,MAC5C;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAQ,iBAAA,EAAmB;AACpC,MAAA,MAAM,UAAU,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,KAAK,EAAC;AAC5C,MAAA,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,CAAE,CAAC,CAAA;AAAA,IACjE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,sBAAsB,SAAA,EAA2B;AAC/C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA,EAAG;AACjC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,SAAS,CAAA,uBAAA,CAAyB,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAOC,uBAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAErC,IAAA,MAAM,KAAA,GAAQ,CAAC,SAAS,CAAA;AACxB,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAE7B,IAAA,OAAO,KAAA,CAAM,SAAS,CAAA,EAAG;AACvB,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,EAAI;AAEvB,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAClB,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AAEb,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AACtC,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,MAAA,CAAO,CAAA,IAAA,EAAO,IAAI,CAAA,CAAE,CAAA;AACzB,MAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAIhB,MAAA,MAAM,IAAA,GAAO,IAAI,KAAA,EAAc;AAC/B,MAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAE3B,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,OAAO,CAAA;AAEzB,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACpC,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,SAAA;AACvC,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,IAAA,CAAK,OAAO,QAAQ,CAAA;AAAA,QACtB;AAEA,QAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AAEf,QAAA,IAAA,CAAK,IAAA,CAAK,GAAG,MAAA,CAAO,IAAA,CAAK,KAAK,YAAA,IAAgB,EAAE,CAAC,CAAA;AACjD,QAAA,IAAA,CAAK,IAAA,CAAK,GAAG,MAAA,CAAO,IAAA,CAAK,KAAK,gBAAA,IAAoB,EAAE,CAAC,CAAA;AAAA,MACvD;AAEA,MAAA,KAAA,CAAM,IAAA,CAAK,GAAG,IAAI,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,IAAA,CAAK,OAAO,KAAK,CAAA;AAAA,EAC1B;AACF;;;;"}

package/dist/monorepo/isMonoRepo.cjs.js

@@ -11,7 +11,7 @@ async function isMonoRepo() {
   const rootPackageJsonPath = cliCommon.targetPaths.resolveRoot("package.json");
   try {
     const pkg = await fs__default.default.readJson(rootPackageJsonPath);
-    return Boolean(pkg?.workspaces?.packages);
+    return Boolean(pkg?.workspaces);
   } catch (error) {
     return false;
   }

package/dist/monorepo/isMonoRepo.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"isMonoRepo.cjs.js","sources":["../../src/monorepo/isMonoRepo.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { targetPaths } from '@backstage/cli-common';\nimport fs from 'fs-extra';\n\n/**\n * Returns try if the current project is a monorepo.\n *\n * @public\n */\nexport async function isMonoRepo(): Promise<boolean> {\n  const rootPackageJsonPath = targetPaths.resolveRoot('package.json');\n  try {\n    const pkg = await fs.readJson(rootPackageJsonPath);\n    return Boolean(pkg?.workspaces?.packages);\n  } catch (error) {\n    return false;\n  }\n}\n"],"names":["targetPaths","fs"],"mappings":";;;;;;;;;AAwBA,eAAsB,UAAA,GAA+B;AACnD,EAAA,MAAM,mBAAA,GAAsBA,qBAAA,CAAY,WAAA,CAAY,cAAc,CAAA;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMC,mBAAA,CAAG,QAAA,CAAS,mBAAmB,CAAA;AACjD,IAAA,OAAO,OAAA,CAAQ,GAAA,EAAK,UAAA,EAAY,QAAQ,CAAA;AAAA,EAC1C,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;;"}
+{"version":3,"file":"isMonoRepo.cjs.js","sources":["../../src/monorepo/isMonoRepo.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { targetPaths } from '@backstage/cli-common';\nimport fs from 'fs-extra';\n\n/**\n * Returns true if the current project is a monorepo.\n *\n * Uses a simple presence check on the `workspaces` field. Empty or invalid\n * workspace config is treated as a monorepo; we do not validate patterns.\n *\n * @public\n */\nexport async function isMonoRepo(): Promise<boolean> {\n  const rootPackageJsonPath = targetPaths.resolveRoot('package.json');\n  try {\n    const pkg = await fs.readJson(rootPackageJsonPath);\n    return Boolean(pkg?.workspaces);\n  } catch (error) {\n    return false;\n  }\n}\n"],"names":["targetPaths","fs"],"mappings":";;;;;;;;;AA2BA,eAAsB,UAAA,GAA+B;AACnD,EAAA,MAAM,mBAAA,GAAsBA,qBAAA,CAAY,WAAA,CAAY,cAAc,CAAA;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMC,mBAAA,CAAG,QAAA,CAAS,mBAAmB,CAAA;AACjD,IAAA,OAAO,OAAA,CAAQ,KAAK,UAAU,CAAA;AAAA,EAChC,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;;"}

package/dist/opaque-internal/src/OpaqueType.cjs.js

@@ -0,0 +1,105 @@
+'use strict';
+
+class OpaqueType {
+  /**
+   * Creates a new opaque type.
+   *
+   * @param options.type The type identifier of the opaque type
+   * @param options.versions The available versions of the opaque type
+   * @returns A new opaque type helper
+   */
+  static create(options) {
+    return new OpaqueType(options.type, new Set(options.versions));
+  }
+  #type;
+  #versions;
+  constructor(type, versions) {
+    this.#type = type;
+    this.#versions = versions;
+  }
+  /**
+   * The internal version of the opaque type, used like this: `typeof MyOpaqueType.TPublic`
+   *
+   * @remarks
+   *
+   * This property is only useful for type checking, its runtime value is `undefined`.
+   */
+  TPublic = void 0;
+  /**
+   * The internal version of the opaque type, used like this: `typeof MyOpaqueType.TInternal`
+   *
+   * @remarks
+   *
+   * This property is only useful for type checking, its runtime value is `undefined`.
+   */
+  TInternal = void 0;
+  /**
+   * @param value Input value expected to be an instance of this opaque type
+   * @returns True if the value matches this opaque type
+   */
+  isType = (value) => {
+    return this.#isThisInternalType(value);
+  };
+  /**
+   * @param value Input value expected to be an instance of this opaque type
+   * @throws If the value is not an instance of this opaque type or is of an unsupported version
+   * @returns The internal version of the opaque type
+   */
+  toInternal = (value) => {
+    if (!this.#isThisInternalType(value)) {
+      throw new TypeError(
+        `Invalid opaque type, expected '${this.#type}', but got '${this.#stringifyUnknown(value)}'`
+      );
+    }
+    if (!this.#versions.has(value.version)) {
+      const versions = Array.from(this.#versions).map(this.#stringifyVersion);
+      if (versions.length > 1) {
+        versions[versions.length - 1] = `or ${versions[versions.length - 1]}`;
+      }
+      const expected = versions.length > 2 ? versions.join(", ") : versions.join(" ");
+      throw new TypeError(
+        `Invalid opaque type instance, got version ${this.#stringifyVersion(
+          value.version
+        )}, expected ${expected}`
+      );
+    }
+    return value;
+  };
+  /**
+   * Creates an instance of the opaque type, returning the public type.
+   *
+   * @param version The version of the instance to create
+   * @param value The remaining public and internal properties of the instance
+   * @returns An instance of the opaque type
+   */
+  createInstance(version, props) {
+    return Object.assign(props, {
+      $$type: this.#type,
+      ...version && { version }
+    });
+  }
+  #isThisInternalType(value) {
+    if (value === null || typeof value !== "object") {
+      return false;
+    }
+    return value.$$type === this.#type;
+  }
+  #stringifyUnknown(value) {
+    if (typeof value !== "object") {
+      return `<${typeof value}>`;
+    }
+    if (value === null) {
+      return "<null>";
+    }
+    if ("$$type" in value) {
+      return String(value.$$type);
+    }
+    return String(value);
+  }
+  #stringifyVersion = (version) => {
+    return version ? `'${version}'` : "undefined";
+  };
+}
+
+exports.OpaqueType = OpaqueType;
+//# sourceMappingURL=OpaqueType.cjs.js.map