@camunda8/cli 4.0.0-alpha.1 → 4.0.0-alpha.2

package/PLUGIN-HELP.md

@@ -202,6 +202,15 @@ c8ctl.npm({ args: ['install', 'c8ctl-plugin-foo'], stdio: 'inherit' });
 
 `stdout: true` returns `{ stdout: string }`; omitting it returns `undefined`. A non-zero npm exit throws.
 
+#### Installing into a directory with `--prefix`
+
+`npm install --prefix <dir>` with no package spec misbehaves on Windows: npm applies the CLI `--prefix` to the global prefix too, and because the Windows global install root is `<prefix>\node_modules` (rather than `<prefix>/lib/node_modules` as on POSIX) npm decides the install is global, rewrites the empty argument list to `.`, and resolves that against the process cwd — so it reads the wrong `package.json` ([#526](https://github.com/camunda/c8ctl/issues/526)). `c8ctl.npm()` detects this exact shape on Windows and instead runs npm with its cwd set to the prefix directory, which is equivalent and correct. Plugins do not need to change their cwd or use an npm-specific option form, and POSIX invocations are untouched. The re-scope is bounded (`--workspaces=false`) so npm resolves exactly that directory rather than promoting the install to a workspace root above it, and a prefix that is itself a workspace root is left untouched.
+
+```typescript
+// Works the same on Linux, macOS and Windows
+c8ctl.npm({ args: ['install', '--prefix', projectDir], stdout: true });
+```
+
 For TypeScript autocomplete, use the exported runtime type:
 
 ```typescript

package/dist/core/runtime.d.ts

@@ -93,6 +93,11 @@ export interface C8ctlPluginRuntime {
      *
      * Throws if an argument cannot be passed safely to cmd.exe (embedded
      * quote, line break, or a `%VAR%` reference).
+     *
+     * On Windows a package-spec-less `install --prefix <dir>` is transparently
+     * re-scoped to run npm with its cwd set to `<dir>`, because npm's own
+     * `--prefix` handling would otherwise install against the process cwd
+     * (see `utils/shared/npm-exec.ts` and #526).
      */
     npm: NpmRunner;
 }

package/dist/core/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAI9D,OAAO,KAAK,EACX,aAAa,EACb,cAAc,EACd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKtD,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC;CACb;AAED,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACzB,CAAC,OAAO,EAAE,uBAAuB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACzB,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa,CAAC;IACjB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACrC,cAAc,IAAI,MAAM,CAAC;IACzB,GAAG,EAAE,SAAS,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iGAAiG;IACjG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa,CAAC;IACjB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,cAAc,IAAI,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,SAAS,CAAC;CACf;AAED,OAAO,CAAC,MAAM,CAAC;IAGd,IAAI,KAAK,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C;AAeD;;;GAGG;AACH,cAAM,KAAM,YAAW,kBAAkB;IACxC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAsB;IACzC,OAAO,CAAC,OAAO,CAAC,CAAW;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAClC,OAAO,CAAC,KAAK,CAAC,CAAY;IAE1B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAOpB;IAEF;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAO3B,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa;IAOhB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAO7C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM;IAOpC,cAAc,IAAI,MAAM;IAOxB,GAAG,CAAC,OAAO,EAAE,uBAAuB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;IACzD,GAAG,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS;IAenD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAE1C;IAED,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEzC;IAED,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,UAAU,EAE/B;IAED,IAAI,MAAM,IAAI,MAAM,EAAE,GAAG,SAAS,CAEjC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAErC;IAED,IAAI,MAAM,IAAI,OAAO,GAAG,SAAS,CAEhC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAEpC;IAED,IAAI,OAAO,IAAI,OAAO,GAAG,SAAS,CAEjC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAErC;IAED,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAE5C;CACD;AAED;;GAEG;AAEH,eAAO,MAAM,KAAK,OAAc,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAI9D,OAAO,KAAK,EACX,aAAa,EACb,cAAc,EACd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKtD,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC;CACb;AAED,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACzB,CAAC,OAAO,EAAE,uBAAuB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACzB,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa,CAAC;IACjB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACrC,cAAc,IAAI,MAAM,CAAC;IACzB,GAAG,EAAE,SAAS,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iGAAiG;IACjG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa,CAAC;IACjB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,cAAc,IAAI,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,GAAG,EAAE,SAAS,CAAC;CACf;AAED,OAAO,CAAC,MAAM,CAAC;IAGd,IAAI,KAAK,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C;AAeD;;;GAGG;AACH,cAAM,KAAM,YAAW,kBAAkB;IACxC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAsB;IACzC,OAAO,CAAC,OAAO,CAAC,CAAW;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAClC,OAAO,CAAC,KAAK,CAAC,CAAY;IAE1B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAOpB;IAEF;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAO3B,YAAY,CACX,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC3C,aAAa;IAOhB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAO7C,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM;IAOpC,cAAc,IAAI,MAAM;IAOxB,GAAG,CAAC,OAAO,EAAE,uBAAuB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;IACzD,GAAG,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS;IAenD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAE1C;IAED,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEzC;IAED,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,UAAU,EAE/B;IAED,IAAI,MAAM,IAAI,MAAM,EAAE,GAAG,SAAS,CAEjC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAErC;IAED,IAAI,MAAM,IAAI,OAAO,GAAG,SAAS,CAEhC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAEpC;IAED,IAAI,OAAO,IAAI,OAAO,GAAG,SAAS,CAEjC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAErC;IAED,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAE5C;CACD;AAED;;GAEG;AAEH,eAAO,MAAM,KAAK,OAAc,CAAC"}

package/dist/core/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AA8GtC;;GAEG;AACH,SAAS,UAAU;IAClB,IAAI,CAAC;QACJ,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,OAAO,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC;IAChB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,KAAK;IACF,cAAc,CAAU;IACxB,aAAa,CAAU;IACvB,WAAW,GAAe,MAAM,CAAC;IACjC,OAAO,CAAY;IACnB,OAAO,CAAW;IAClB,QAAQ,CAAW;IACnB,gBAAgB,CAAU;IAC1B,KAAK,CAAa;IAEjB,GAAG,GAAa;QACxB,OAAO,EAAE,UAAU,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC;KACpC,CAAC;IAEF;;;;OAIG;IACH,IAAI,CAAC,IAAe;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,YAAY,CACX,WAAoB,EACpB,mBAA6C;QAE7C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,eAAe,CAAC,WAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,SAAS,CAAC,IAAiB;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,cAAc;QACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;IACpC,CAAC;IAID,GAAG,CACF,OAA6D;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QACD,uEAAuE;QACvE,0BAA0B;QAC1B,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,0DAA0D;IAC1D,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,WAAW;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;IAC7B,CAAC;IAED,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrB,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa,CAAC,KAAyB;QAC1C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAED,IAAI,YAAY,CAAC,KAAyB;QACzC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;IAED,IAAI,UAAU,CAAC,KAAiB;QAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,IAAI,MAAM,CAAC,KAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,IAAI,MAAM,CAAC,KAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,KAA0B;QACrC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,eAAe;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IAED,IAAI,eAAe,CAAC,KAAyB;QAC5C,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAC/B,CAAC;CACD;AAED;;GAEG;AACH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAmHtC;;GAEG;AACH,SAAS,UAAU;IAClB,IAAI,CAAC;QACJ,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,OAAO,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC;IAChB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,KAAK;IACF,cAAc,CAAU;IACxB,aAAa,CAAU;IACvB,WAAW,GAAe,MAAM,CAAC;IACjC,OAAO,CAAY;IACnB,OAAO,CAAW;IAClB,QAAQ,CAAW;IACnB,gBAAgB,CAAU;IAC1B,KAAK,CAAa;IAEjB,GAAG,GAAa;QACxB,OAAO,EAAE,UAAU,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC;KACpC,CAAC;IAEF;;;;OAIG;IACH,IAAI,CAAC,IAAe;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,YAAY,CACX,WAAoB,EACpB,mBAA6C;QAE7C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,eAAe,CAAC,WAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,SAAS,CAAC,IAAiB;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,cAAc;QACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;IACpC,CAAC;IAID,GAAG,CACF,OAA6D;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QACD,uEAAuE;QACvE,0BAA0B;QAC1B,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,0DAA0D;IAC1D,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,WAAW;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;IAC7B,CAAC;IAED,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrB,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa,CAAC,KAAyB;QAC1C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAED,IAAI,YAAY,CAAC,KAAyB;QACzC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;IAED,IAAI,UAAU,CAAC,KAAiB;QAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,IAAI,MAAM,CAAC,KAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,IAAI,MAAM,CAAC,KAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,KAA0B;QACrC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,eAAe;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IAED,IAAI,eAAe,CAAC,KAAyB;QAC5C,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAC/B,CAAC;CACD;AAED;;GAEG;AACH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC"}

package/dist/default-plugins/bpmn/c8ctl-plugin.js

@@ -1,7 +1,12 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name2 in all)

package/dist/default-plugins/element-template/c8ctl-plugin.js

@@ -4,11 +4,20 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name2 in all)

package/dist/default-plugins/element-template/package.json

@@ -12,7 +12,7 @@
   "devDependencies": {
     "@types/semver": "^7.7.1",
     "bpmn-js-element-templates": "^2.23.1",
-    "bpmn-js-headless": "^0.1.0",
+    "bpmn-js-headless": "^0.2.0",
     "zeebe-bpmn-moddle": "^1.11.0"
   }
 }

package/dist/templates/AGENTS.md

@@ -78,3 +78,10 @@ Before considering a change complete:
 - Make the smallest change required for each task.
 - Do not add unrelated commands or refactors.
 - Keep `metadata.commands` descriptions concise and user-facing.
+
+## Git / GitHub CLI output
+
+- `git` and `gh` commands can invoke a pager and hang waiting for keyboard input (e.g. `q` to quit), which looks like the terminal is stuck. Always disable paging before running commands whose output might exceed a screen:
+
+- Prefix `git` read commands with `--no-pager`, e.g. `git --no-pager log`, `git --no-pager diff`, `git --no-pager show`.
+- Pipe `gh` output through `cat`, e.g. `gh pr list | cat`, `gh pr view 123 | cat`, `gh issue list | cat`.

package/dist/utils/shared/npm-exec.d.ts

@@ -26,6 +26,13 @@
  * the two constructs that survive double quotes — an embedded `"` and a
  * `%VAR%` environment-variable reference — are rejected outright rather than
  * escaped.
+ *
+ * A second Windows-only hazard is npm's own `--prefix` handling: a CLI
+ * `--prefix` sets the *global* prefix as well as the local one, and Windows
+ * puts the global install root directly under the prefix, so for a plain
+ * `npm install --prefix <dir>` npm cannot tell a local install apart from a
+ * global one and silently installs the *process cwd* instead (#526). That case
+ * is re-expressed as a cwd — see `rescopeWindowsLocalInstall()`.
  */
 import { type ExecFileSyncOptions } from "node:child_process";
 export interface NpmInvocation {
@@ -35,6 +42,8 @@ export interface NpmInvocation {
     args: string[];
     /** Whether the invocation must go through a shell. */
     shell: boolean;
+    /** Directory to run npm in; `undefined` inherits the process cwd. */
+    cwd?: string;
 }
 export interface NpmResult {
     stdout?: string;
@@ -49,15 +58,22 @@ interface NpmArgsWithoutOutput extends NpmArgs {
     stdio?: ExecFileSyncOptions["stdio"];
     stdout?: false;
 }
+/** What a prefix directory's `package.json` says, or `null` if there is none. */
+export interface PrefixManifest {
+    /** Whether the manifest declares a `workspaces` field. */
+    declaresWorkspaces: boolean;
+}
 /**
  * Resolve how npm has to be spawned on the given platform.
  *
  * Exported for unit testing: pass an explicit `platform` to exercise the
- * Windows branch from a POSIX host.
+ * Windows branch from a POSIX host, and `readPrefixManifest` to exercise the
+ * Windows `--prefix` rescope without touching the filesystem.
  */
-export declare function buildNpmInvocation({ args, platform, }: {
+export declare function buildNpmInvocation({ args, platform, readPrefixManifest, }: {
     args: readonly string[];
     platform?: NodeJS.Platform;
+    readPrefixManifest?: (dir: string) => PrefixManifest | null;
 }): NpmInvocation;
 /**
  * Run npm through the platform-aware wrapper.

package/dist/utils/shared/npm-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-exec.d.ts","sourceRoot":"","sources":["../../../src/utils/shared/npm-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACN,KAAK,mBAAmB,EAGxB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,aAAa;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,OAAO;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACxB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IAC1C,MAAM,EAAE,IAAI,CAAC;CACb;AAED,UAAU,oBAAqB,SAAQ,OAAO;IAC7C,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,KAAK,CAAC;CACf;AAqBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EAClC,IAAI,EACJ,QAA2B,GAC3B,EAAE;IACF,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B,GAAG,aAAa,CAuBhB;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACpE,wBAAgB,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC"}
+{"version":3,"file":"npm-exec.d.ts","sourceRoot":"","sources":["../../../src/utils/shared/npm-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACN,KAAK,mBAAmB,EAGxB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,WAAW,aAAa;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,OAAO;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACxB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IAC1C,MAAM,EAAE,IAAI,CAAC;CACb;AAED,UAAU,oBAAqB,SAAQ,OAAO;IAC7C,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,KAAK,CAAC;CACf;AA2DD,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC9B,0DAA0D;IAC1D,kBAAkB,EAAE,OAAO,CAAC;CAC5B;AAmGD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAClC,IAAI,EACJ,QAA2B,EAC3B,kBAAoC,GACpC,EAAE;IACF,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;CAC5D,GAAG,aAAa,CA4BhB;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACpE,wBAAgB,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC"}

package/dist/utils/shared/npm-exec.js

@@ -26,8 +26,17 @@
  * the two constructs that survive double quotes — an embedded `"` and a
  * `%VAR%` environment-variable reference — are rejected outright rather than
  * escaped.
+ *
+ * A second Windows-only hazard is npm's own `--prefix` handling: a CLI
+ * `--prefix` sets the *global* prefix as well as the local one, and Windows
+ * puts the global install root directly under the prefix, so for a plain
+ * `npm install --prefix <dir>` npm cannot tell a local install apart from a
+ * global one and silently installs the *process cwd* instead (#526). That case
+ * is re-expressed as a cwd — see `rescopeWindowsLocalInstall()`.
  */
 import { execFileSync, execSync, } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
 /** Characters that cannot be represented inside a double-quoted cmd.exe argument: quotes, line breaks and NUL. */
 const WINDOWS_UNQUOTABLE = /["\r\n\0]/;
 /** A cmd.exe `%VAR%` environment-variable reference, which cmd.exe expands even inside double quotes.
@@ -44,13 +53,142 @@ const WINDOWS_CMD_VARIABLE = /%[A-Z_][^%]*?%/i;
 function quoteWindowsArg(arg) {
     return `"${arg.replace(/(\\+)$/, "$1$1")}"`;
 }
+/** npm's `install` verb and every alias npm maps onto it (`npm help install`, `lib/utils/cmd-list.js`). */
+const NPM_INSTALL_COMMANDS = new Set([
+    "install",
+    "add",
+    "i",
+    "in",
+    "ins",
+    "inst",
+    "insta",
+    "instal",
+    "isnt",
+    "isnta",
+    "isntal",
+    "isntall",
+]);
+/** `--prefix` and its documented short form `-C`. */
+function isPrefixFlag(arg) {
+    return arg === "--prefix" || arg === "-C";
+}
+/** `-g`, any single-dash cluster containing `g` (`-gf`), `--global`, or `--location=global`. */
+function isGlobalFlag(arg) {
+    if (arg === "--global" || arg === "--global=true")
+        return true;
+    if (arg === "--location=global")
+        return true;
+    return /^-[a-z]*g[a-z]*$/i.test(arg);
+}
+/** Any spelling of npm's workspace selectors — `-w`, `--workspace(s)`, `--no-workspaces`. */
+function isWorkspaceFlag(arg) {
+    return arg === "-w" || /^--(no-)?workspaces?(=|$)/.test(arg);
+}
+/**
+ * Re-express `npm install --prefix <dir>` (no package specs) as an npm run
+ * whose *working directory* is `<dir>`.
+ *
+ * npm applies a CLI `--prefix` to both the local and the global prefix. On
+ * Windows the global install root is `<prefix>\node_modules`, while on POSIX
+ * it is `<prefix>/lib/node_modules`, so on Windows `npm install --prefix <dir>`
+ * makes the local install target (`npm.prefix`) and the global install target
+ * (`dirname(npm.globalDir)`) the *same* directory. npm's install command reads
+ * that as a global install of the current directory:
+ *
+ *     // `npm i -g` => "install this package globally"
+ *     if (where === globalTop && !args.length) { args = ['.'] }
+ *
+ * `.` is then resolved against the *process* cwd, so npm stops installing the
+ * dependencies declared in `<dir>` and instead tries to read `package.json`
+ * from the cwd — the ENOENT reported in #526. POSIX never trips the collision.
+ *
+ * Setting npm's cwd expresses the same intent without the prefix collision:
+ * `npm.localPrefix` walks up from the cwd and settles on `<dir>`, which is
+ * where the `package.json` lives. The two are not *quite* interchangeable —
+ * having settled on `<dir>`, npm keeps walking up to see whether an ancestor
+ * declares `<dir>` as one of its workspaces and promotes the local prefix to
+ * that ancestor if so, something `--prefix` never does — so the rewrite also
+ * passes `--workspaces=false`, which makes npm stop at `<dir>` (see
+ * `@npmcli/config`'s `loadLocalPrefix()`). The rewrite is deliberately
+ * conservative:
+ *
+ *   - only the install verb with no package spec is affected — every other npm
+ *     command, and `npm install <pkg> --prefix <dir>`, resolves `--prefix`
+ *     correctly on Windows;
+ *   - a global install keeps `--prefix`, which is exactly what it means there;
+ *   - any other bare token (e.g. the value of `--loglevel warn`) is treated as
+ *     a possible package spec and suppresses the rewrite;
+ *   - `<dir>` must actually contain a `package.json`, so npm can never walk up
+ *     past `<dir>` and install some parent directory's dependencies instead;
+ *   - a `<dir>` that is itself a workspace root, or an invocation that already
+ *     carries a workspace selector, is left alone: `--workspaces=false` would
+ *     drop the workspaces from the install instead of merely bounding the
+ *     walk-up.
+ */
+function rescopeWindowsLocalInstall(args, readPrefixManifest) {
+    const kept = [];
+    const bareTokens = [];
+    let prefix;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === undefined)
+            continue;
+        if (isGlobalFlag(arg) || isWorkspaceFlag(arg))
+            return null;
+        if (isPrefixFlag(arg)) {
+            const value = args[i + 1];
+            // A dangling `--prefix` is npm's problem to report, not ours.
+            if (value === undefined || value.startsWith("-"))
+                return null;
+            prefix = value;
+            i++;
+            continue;
+        }
+        if (arg.startsWith("--prefix=")) {
+            prefix = arg.slice("--prefix=".length);
+            continue;
+        }
+        if (!arg.startsWith("-"))
+            bareTokens.push(arg);
+        kept.push(arg);
+    }
+    if (prefix === undefined || prefix === "")
+        return null;
+    const command = bareTokens[0];
+    if (bareTokens.length !== 1 || command === undefined)
+        return null;
+    if (!NPM_INSTALL_COMMANDS.has(command))
+        return null;
+    const manifest = readPrefixManifest(prefix);
+    if (manifest === null || manifest.declaresWorkspaces)
+        return null;
+    return { args: [...kept, "--workspaces=false"], cwd: prefix };
+}
+/** Read `<dir>/package.json`; `null` when it is absent or unreadable. */
+function readPackageJson(dir) {
+    let parsed;
+    try {
+        const source = readFileSync(join(dir, "package.json"), "utf-8");
+        // npm reads manifests through json-parse-even-better-errors, which
+        // tolerates a leading BOM — Windows editors write them, and the whole
+        // point of this branch is Windows.
+        parsed = JSON.parse(source.replace(/^\uFEFF/, ""));
+    }
+    catch {
+        // Absent or malformed: either way there is nothing to re-scope onto.
+        return null;
+    }
+    const declaresWorkspaces = typeof parsed === "object" && parsed !== null && "workspaces" in parsed;
+    return { declaresWorkspaces };
+}
 /**
  * Resolve how npm has to be spawned on the given platform.
  *
  * Exported for unit testing: pass an explicit `platform` to exercise the
- * Windows branch from a POSIX host.
+ * Windows branch from a POSIX host, and `readPrefixManifest` to exercise the
+ * Windows `--prefix` rescope without touching the filesystem.
  */
-export function buildNpmInvocation({ args, platform = process.platform, }) {
+export function buildNpmInvocation({ args, platform = process.platform, readPrefixManifest = readPackageJson, }) {
     if (platform !== "win32") {
         return { command: "npm", args: [...args], shell: false };
     }
@@ -62,14 +200,18 @@ export function buildNpmInvocation({ args, platform = process.platform, }) {
             throw new Error(`Refusing to run npm: argument contains a cmd.exe environment variable reference: ${JSON.stringify(arg)}`);
         }
     }
+    // Validation runs on the arguments as given, so rescoping never widens what
+    // is accepted: a hostile `--prefix` value is rejected before it can become a cwd.
+    const rescoped = rescopeWindowsLocalInstall(args, readPrefixManifest);
     return {
         command: "npm.cmd",
-        args: args.map(quoteWindowsArg),
+        args: (rescoped?.args ?? args).map(quoteWindowsArg),
         shell: true,
+        ...(rescoped ? { cwd: rescoped.cwd } : {}),
     };
 }
 export function npm({ args, ...opts }) {
-    const { command, args: resolvedArgs, shell } = buildNpmInvocation({ args });
+    const { command, args: resolvedArgs, shell, cwd, } = buildNpmInvocation({ args });
     // On Windows, `shell` is true because npm is a .cmd shim that requires cmd.exe.
     // execFileSync(command, args, { shell: true }) triggers DEP0190 in Node ≥ 22 when
     // an args array is combined with shell: true. execSync(commandString) takes a
@@ -82,10 +224,11 @@ export function npm({ args, ...opts }) {
                 stdout: execSync(cmdLine, {
                     stdio: ["ignore", "pipe", "pipe"],
                     encoding: "utf-8",
+                    cwd,
                 }),
             };
         }
-        execSync(cmdLine, { stdio: opts.stdio });
+        execSync(cmdLine, { stdio: opts.stdio, cwd });
         return undefined;
     }
     if (opts.stdout) {
@@ -94,10 +237,11 @@ export function npm({ args, ...opts }) {
                 stdio: ["ignore", "pipe", "pipe"],
                 encoding: "utf-8",
                 shell: false,
+                cwd,
             }),
         };
     }
-    execFileSync(command, resolvedArgs, { stdio: opts.stdio, shell: false });
+    execFileSync(command, resolvedArgs, { stdio: opts.stdio, shell: false, cwd });
     return undefined;
 }
 //# sourceMappingURL=npm-exec.js.map

package/dist/utils/shared/npm-exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"npm-exec.js","sourceRoot":"","sources":["../../../src/utils/shared/npm-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAEN,YAAY,EACZ,QAAQ,GACR,MAAM,oBAAoB,CAAC;AA4B5B,kHAAkH;AAClH,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAEvC;;;yEAGyE;AACzE,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAE/C;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IACnC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAClC,IAAI,EACJ,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAI3B;IACA,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACd,yGAAyG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC9H,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACd,oFAAoF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO;QACN,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QAC/B,KAAK,EAAE,IAAI;KACX,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,GAAG,CAAC,EACnB,IAAI,EACJ,GAAG,IAAI,EACmC;IAC1C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,gFAAgF;IAChF,kFAAkF;IAClF,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE;oBACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,QAAQ,EAAE,OAAO;iBACjB,CAAC;aACF,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;YACN,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE;gBAC3C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,KAAK;aACZ,CAAC;SACF,CAAC;IACH,CAAC;IACD,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC;AAClB,CAAC"}
+{"version":3,"file":"npm-exec.js","sourceRoot":"","sources":["../../../src/utils/shared/npm-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAEN,YAAY,EACZ,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA8BjC,kHAAkH;AAClH,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAEvC;;;yEAGyE;AACzE,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAE/C;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IACnC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,2GAA2G;AAC3G,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACpC,SAAS;IACT,KAAK;IACL,GAAG;IACH,IAAI;IACJ,KAAK;IACL,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;CACT,CAAC,CAAC;AAEH,qDAAqD;AACrD,SAAS,YAAY,CAAC,GAAW;IAChC,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,GAAW;IAChC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,GAAG,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,6FAA6F;AAC7F,SAAS,eAAe,CAAC,GAAW;IACnC,OAAO,GAAG,KAAK,IAAI,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,SAAS,0BAA0B,CAClC,IAAuB,EACvB,kBAA0D;IAE1D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAA0B,CAAC;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,8DAA8D;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9D,MAAM,GAAG,KAAK,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACvC,SAAS;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAElE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,yEAAyE;AACzE,SAAS,eAAe,CAAC,GAAW;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAChE,mEAAmE;QACnE,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,kBAAkB,GACvB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,MAAM,CAAC;IACzE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAClC,IAAI,EACJ,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,kBAAkB,GAAG,eAAe,GAKpC;IACA,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACd,yGAAyG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC9H,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACd,oFAAoF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACH,CAAC;IACF,CAAC;IAED,4EAA4E;IAC5E,kFAAkF;IAClF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAEtE,OAAO;QACN,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;QACnD,KAAK,EAAE,IAAI;QACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,GAAG,CAAC,EACnB,IAAI,EACJ,GAAG,IAAI,EACmC;IAC1C,MAAM,EACL,OAAO,EACP,IAAI,EAAE,YAAY,EAClB,KAAK,EACL,GAAG,GACH,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,gFAAgF;IAChF,kFAAkF;IAClF,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE;oBACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,QAAQ,EAAE,OAAO;oBACjB,GAAG;iBACH,CAAC;aACF,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;YACN,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE;gBAC3C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,KAAK;gBACZ,GAAG;aACH,CAAC;SACF,CAAC;IACH,CAAC;IACD,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AAClB,CAAC"}