@endora-commerce/cli 0.100.0

package/dist/lib/workspace-packages.d.ts

@@ -0,0 +1,186 @@
+/**
+ * The two filesystem questions this derivation asks.
+ *
+ * Injected so a red proof can hand in a whole synthetic checkout at the top of
+ * the analysis rather than a half-classified record at the bottom of it
+ * (issue #130). `scripts/workspace-resolution.ts` already owns an injected
+ * filesystem for exactly that reason and adapts it onto this one.
+ */
+export interface WorkspaceFs {
+    /** File contents, or `null` when the file is absent or unreadable. */
+    readonly readText: (path: string) => string | null;
+    /** Immediate subdirectory names, or `[]` when the directory is absent. */
+    readonly listDirectories: (path: string) => readonly string[];
+}
+/** One package this repository owns, as `pnpm-workspace.yaml` globs it. */
+export interface WorkspaceMember {
+    /** Absolute directory. */
+    readonly dir: string;
+    /** The `name` its `package.json` declares. */
+    readonly name: string;
+    /** The parsed manifest, so a caller can read its own fields off it. */
+    readonly manifest: Readonly<Record<string, unknown>>;
+}
+/** The real filesystem behind {@link WorkspaceFs}. Absence is `null`/`[]`, never a throw. */
+export declare function nodeWorkspaceFs(): WorkspaceFs;
+/** The `packages:` list of `pnpm-workspace.yaml`, as written. */
+export declare function workspaceGlobs(repoRoot: string, fs: WorkspaceFs): readonly string[];
+/** Directories a workspace glob matches, `*` per segment and `**` any depth. */
+export declare function expandWorkspaceGlob(repoRoot: string, glob: string, fs: WorkspaceFs): readonly string[];
+/**
+ * Every directory the workspace globs match and that carries a `package.json`.
+ *
+ * Sorted, deduplicated, absolute. A glob that matches a directory without a
+ * manifest is not an error — `packages/modules` will match `packages/*` while
+ * being nothing but the parent of the members — it simply is not a member.
+ */
+export declare function workspaceMemberDirectories(repoRoot: string, fs: WorkspaceFs): readonly string[];
+/** Every workspace member whose manifest declares a `name`, sorted by directory. */
+export declare function workspaceMembers(repoRoot: string, fs: WorkspaceFs): readonly WorkspaceMember[];
+/**
+ * A workspace member, plus which workspace entries produced it.
+ *
+ * The classification is one sentence and it is the workspace file's own: **an
+ * entry containing a glob character enumerates a library *family* — a set whose
+ * membership is decided by what is on disk — and a literal entry names one
+ * deployable.** Today that reads `packages/*` and `packages/modules/*` as the
+ * family and `backend`, `storefront`, `admin`, `docs` as applications, which is
+ * the split `AGENTS.md` states in prose, and it costs nothing when the family
+ * grows: module packages a directory deeper arrive through a glob and are
+ * family by construction.
+ *
+ * A member matched by both a literal and a glob counts as **family**, which is
+ * the failing-safe direction for both readers: a family member is versionable
+ * (it must carry a changeset) and it ships a `dist` (it must pass the
+ * distribution gate). Being wrong that way asks for more, never less.
+ */
+export interface ClassifiedWorkspaceMember extends WorkspaceMember {
+    /**
+     * True when a *glob* workspace entry produced it — a library family. False
+     * when every entry that produced it is a literal directory — an application.
+     */
+    readonly family: boolean;
+    /** The workspace entries that matched it, for a message that can name one. */
+    readonly globs: readonly string[];
+}
+/** Every member, classified, with what each workspace entry produced. */
+export interface WorkspaceClassification {
+    readonly members: readonly ClassifiedWorkspaceMember[];
+    /** Non-negated workspace entries, and how many members each produced. */
+    readonly globCoverage: ReadonlyMap<string, number>;
+}
+/**
+ * {@link workspaceMembers}, with the family/application split its callers used
+ * to derive for themselves.
+ *
+ * Two readers need it and they are asking the same question at two distances:
+ * `check-release-intent.ts` asks *"must a change here carry a changeset?"* and
+ * `test/unit/packages/package-dist-build.test.ts` asks *"must this package ship
+ * a compiled `dist` a stranger can consume?"* Both are *"is this a library we
+ * publish or an application we deploy?"*, and a second answer to it is two
+ * answers waiting to disagree.
+ */
+export declare function classifyWorkspaceMembers(repoRoot: string, fs: WorkspaceFs): WorkspaceClassification;
+/**
+ * The npm scopes those members are published under, sorted, each with its
+ * trailing slash — `['@endora-commerce/']` today.
+ *
+ * Derived rather than declared, because a second scope is exactly what feature
+ * 080 introduces and the one thing that must not happen is a guard that keeps
+ * answering about the first one. An unscoped member (`backend`, `admin`,
+ * `docs`) contributes no scope: nothing resolves it by specifier, so there is
+ * no link for a guard to classify.
+ */
+export declare function workspaceScopes(members: readonly WorkspaceMember[]): readonly string[];
+/** A workspace member that declares itself a backend module. */
+export interface ModulePackage {
+    /** Absolute directory of the member. */
+    readonly dir: string;
+    /** The npm name it publishes under. */
+    readonly name: string;
+    /** The manifest id it declares — identity of record everywhere (D-142). */
+    readonly moduleId: string;
+}
+/**
+ * The module id a member declares about itself, or `null`.
+ *
+ * The `endora` block is the package's own statement, the same one
+ * `src/packages/installed-packages.ts` reads at boot, so a module package is
+ * recognised wherever the workspace globs put it and whatever its directory is
+ * called. Nothing here reads the npm name's spelling — a `mod-` prefix rule
+ * would be a derived fact written down (D-100).
+ */
+export declare function declaredModuleId(member: WorkspaceMember): string | null;
+/**
+ * Every workspace member that declares itself a module, sorted by directory.
+ *
+ * Unfiltered by the manifest index on purpose, which is the one difference from
+ * `lib/module-roots.ts`'s package half: that derivation is answering "which
+ * *registered* modules live in a package", and a consumer outside the backend —
+ * the Tailwind source guard in `scripts/tailwind-source-scan.ts` — is answering
+ * "which packages can ship UI". A package that ships a screen before its
+ * manifest reaches the generated index still ships the screen.
+ */
+export declare function modulePackages(members: readonly WorkspaceMember[]): readonly ModulePackage[];
+/** A workspace member that declares itself a package of admin UI. */
+export interface AdminUiPackage {
+    /** Absolute directory of the member. */
+    readonly dir: string;
+    /** The npm name it publishes under. */
+    readonly name: string;
+}
+/**
+ * Does a member declare itself a package whose sources are **admin UI**?
+ *
+ * The third value of the `endora.type` block, beside `'platform'` (the host)
+ * and `'module'` (a module package), and read the same way: the package's own
+ * statement about itself, over the members `pnpm-workspace.yaml` globs. Nothing
+ * here reads a directory or a name — `packages/admin-kit` and
+ * `@endora-commerce/admin-kit` appear in no predicate, which is what lets a
+ * second admin-ui package arrive under any name and be judged from its first
+ * commit (feature 091, P5c).
+ *
+ * ## Why this is not D-171's refused self-certification
+ *
+ * D-171 refused an `endora`-block field that would have **exempted** a package
+ * from `check:module-boundary`'s ledger: an exemption from a rule, issued by
+ * the party the rule measures. This declaration is the opposite direction. It
+ * puts the package *into* two populations — `i18n:hardcoded`'s walk and
+ * `check:admin-zones`' third `foreign-module-id` population — so declaring it
+ * buys obligations and nothing else, and the only thing an author gains by
+ * omitting it is that their hard-coded strings and their foreign module ids go
+ * unread.
+ *
+ * Forgetting it therefore has to fail loudly, and it does: `i18n:hardcoded`'s
+ * baseline is keyed by path and two-way, so a file that arrives in an
+ * undeclared package is a ledger entry naming a path the walk never opened —
+ * `drained`, exit 1 — in the same run. That is the property that makes a
+ * declaration safe here and an exemption unsafe there.
+ */
+export declare function declaresAdminUi(member: WorkspaceMember): boolean;
+/**
+ * Every workspace member that declares itself admin UI, sorted by directory.
+ *
+ * The shape {@link modulePackages} has, for the same reason: one derivation of
+ * "which packages ship admin code", so the two instruments that walk them
+ * cannot come to disagree about the population.
+ */
+export declare function adminUiPackages(members: readonly WorkspaceMember[]): readonly AdminUiPackage[];
+/**
+ * Is this manifest a Next application — the shape the reference storefront has?
+ *
+ * A member qualifies by declaring `next` as a dependency **and** a `build`
+ * script that runs it. Both halves are needed: a package that merely depends on
+ * `next` may be a component library that peers on it, and a `build` script
+ * naming `next build` in a manifest that does not depend on `next` is a
+ * misconfiguration rather than an application.
+ *
+ * It lives here, beside the derivation of *which directories are members*,
+ * because two consumers ask the same question of the same population and a
+ * second copy of the predicate is two answers waiting to disagree about which
+ * application they are talking about: `new-storefront/reference.ts` resolves the
+ * storefront it copies, and `check-release-intent.ts` resolves the one whose
+ * dependency closure is the publication set (feature 104, FR-001).
+ */
+export declare function isNextApplication(manifest: Readonly<Record<string, unknown>>): boolean;
+//# sourceMappingURL=workspace-packages.d.ts.map

package/dist/lib/workspace-packages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-packages.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-packages.ts"],"names":[],"mappings":"AAoDA;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;CAC/D;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,IAAI,WAAW,CAuB7C;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,GAAG,SAAS,MAAM,EAAE,CAoBnF;AAeD,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,WAAW,GACd,SAAS,MAAM,EAAE,CAiBnB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,WAAW,GACd,SAAS,MAAM,EAAE,CAgBnB;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,GAAG,SAAS,eAAe,EAAE,CAkB9F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACvD,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,WAAW,GACd,uBAAuB,CAwBzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,MAAM,EAAE,CAOtF;AAED,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,aAAa,EAAE,CAQ5F;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAIhE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,SAAS,cAAc,EAAE,CAK3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAUtF"}

package/dist/lib/workspace-packages.js

@@ -0,0 +1,351 @@
+/**
+ * "Which directories does this repository declare as its own packages?" — one
+ * derivation, for every consumer of the answer (feature 080, T040a).
+ *
+ * It lives under `backend/scripts/lib/` rather than at the repository root, and
+ * that is a runtime constraint rather than a taste: the root `package.json`
+ * declares no `"type": "module"`, so `tsx` loads a root `scripts/*.ts` as
+ * CommonJS and a named import of it from `backend/` — which *is* ESM — fails at
+ * instantiation. `scripts/workspace-resolution.ts` reaches it from above
+ * instead, where vite transforms it and the direction costs nothing.
+ *
+ * Three places need it and, before this file, two of them had their own copy
+ * and the third had a guess:
+ *
+ *   * `backend/scripts/check-overlay-determinism.ts` expands the
+ *     `pnpm-workspace.yaml` globs to decide whether a rendered entry lands in a
+ *     workspace member or under an installed package (T030a). That is where the
+ *     expansion below comes from, verbatim.
+ *   * `scripts/workspace-resolution.ts` — the issue #255 guard — asked
+ *     `readdir('packages')` instead, which is the same question answered one
+ *     level deep. A package under `packages/<group>/<name>` is invisible to it,
+ *     and invisible means **unguarded**: its `node_modules` link can point at
+ *     another checkout and the run compiles somebody else's branch while
+ *     reporting nothing.
+ *   * `backend/scripts/lib/module-roots.ts` needs the same list to find the
+ *     module roots that are packages rather than directories of the
+ *     application.
+ *
+ * The workspace file is the authority, deliberately, and `node_modules` is not:
+ * a member that is declared and not installed is still a member — the tree is
+ * committed, and what it contains is a fact about the tree rather than about
+ * whether somebody has run `pnpm install`. It is also the only authority that
+ * *moves with the layout*: writing `packages/modules` into a check would be a
+ * derived fact written down, which is what D-100 forbids and what feature 080
+ * has had to repair three times.
+ *
+ * ## What it cannot see, stated rather than discovered later
+ *
+ *   * **A flow-style `pnpm-workspace.yaml`** (`packages: [a, b]`). The reader
+ *     below is a block-sequence reader; a flow list produces **no** globs, and
+ *     every caller treats "no glob" as a refusal rather than as an empty
+ *     workspace. That is the same call `check-overlay-determinism` makes, for
+ *     the same reason: a silently empty member list turns a containment test
+ *     into a vacuous pass.
+ *   * **A package vendored by hand into a workspace directory.** It reads as a
+ *     member, because the globs are the authority.
+ *   * **`pnpm-workspace.yaml` fields other than `packages:`.** pnpm has grown
+ *     several; none of them changes which directories are members.
+ */
+import { readFileSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+/** The real filesystem behind {@link WorkspaceFs}. Absence is `null`/`[]`, never a throw. */
+export function nodeWorkspaceFs() {
+    return {
+        readText(path) {
+            try {
+                return readFileSync(path, 'utf8');
+            }
+            catch {
+                return null;
+            }
+        },
+        listDirectories(path) {
+            try {
+                return readdirSync(path).filter((name) => {
+                    try {
+                        return statSync(join(path, name)).isDirectory();
+                    }
+                    catch {
+                        return false;
+                    }
+                });
+            }
+            catch {
+                return [];
+            }
+        },
+    };
+}
+/** The `packages:` list of `pnpm-workspace.yaml`, as written. */
+export function workspaceGlobs(repoRoot, fs) {
+    const source = fs.readText(join(repoRoot, 'pnpm-workspace.yaml'));
+    if (source === null)
+        return [];
+    const globs = [];
+    let inList = false;
+    for (const raw of source.split('\n')) {
+        const line = raw.replace(/#.*$/, '').trimEnd();
+        if (/^packages:\s*$/.test(line)) {
+            inList = true;
+            continue;
+        }
+        if (!inList)
+            continue;
+        const item = /^\s+-\s*(.+)$/.exec(line);
+        if (item === null) {
+            if (line.trim() === '')
+                continue;
+            break;
+        }
+        globs.push(item[1].trim().replace(/^['"]|['"]$/g, ''));
+    }
+    return globs;
+}
+function childDirectories(dir, fs) {
+    return fs.listDirectories(dir).filter((name) => name !== 'node_modules' && !name.startsWith('.'));
+}
+function directoriesUnder(dir, fs, out = []) {
+    for (const name of childDirectories(dir, fs)) {
+        const full = join(dir, name);
+        out.push(full);
+        directoriesUnder(full, fs, out);
+    }
+    return out;
+}
+/** Directories a workspace glob matches, `*` per segment and `**` any depth. */
+export function expandWorkspaceGlob(repoRoot, glob, fs) {
+    const segments = glob.split('/').filter((segment) => segment.length > 0);
+    let cursor = [repoRoot];
+    for (const segment of segments) {
+        const next = [];
+        for (const dir of cursor) {
+            if (segment === '**') {
+                next.push(dir, ...directoriesUnder(dir, fs));
+                continue;
+            }
+            for (const name of childDirectories(dir, fs)) {
+                if (segment === '*' || segment === name)
+                    next.push(join(dir, name));
+            }
+        }
+        cursor = next;
+    }
+    return cursor;
+}
+/**
+ * Every directory the workspace globs match and that carries a `package.json`.
+ *
+ * Sorted, deduplicated, absolute. A glob that matches a directory without a
+ * manifest is not an error — `packages/modules` will match `packages/*` while
+ * being nothing but the parent of the members — it simply is not a member.
+ */
+export function workspaceMemberDirectories(repoRoot, fs) {
+    const globs = workspaceGlobs(repoRoot, fs);
+    const excluded = new Set(globs
+        .filter((glob) => glob.startsWith('!'))
+        .flatMap((glob) => expandWorkspaceGlob(repoRoot, glob.slice(1), fs)));
+    const found = new Set();
+    for (const glob of globs.filter((candidate) => !candidate.startsWith('!'))) {
+        for (const dir of expandWorkspaceGlob(repoRoot, glob, fs)) {
+            if (excluded.has(dir))
+                continue;
+            if (fs.readText(join(dir, 'package.json')) === null)
+                continue;
+            found.add(dir);
+        }
+    }
+    return [...found].sort();
+}
+/** Every workspace member whose manifest declares a `name`, sorted by directory. */
+export function workspaceMembers(repoRoot, fs) {
+    const members = [];
+    for (const dir of workspaceMemberDirectories(repoRoot, fs)) {
+        const text = fs.readText(join(dir, 'package.json'));
+        if (text === null)
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            continue;
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+            continue;
+        const manifest = parsed;
+        const name = manifest['name'];
+        if (typeof name !== 'string' || name.length === 0)
+            continue;
+        members.push({ dir, name, manifest });
+    }
+    return members;
+}
+/**
+ * {@link workspaceMembers}, with the family/application split its callers used
+ * to derive for themselves.
+ *
+ * Two readers need it and they are asking the same question at two distances:
+ * `check-release-intent.ts` asks *"must a change here carry a changeset?"* and
+ * `test/unit/packages/package-dist-build.test.ts` asks *"must this package ship
+ * a compiled `dist` a stranger can consume?"* Both are *"is this a library we
+ * publish or an application we deploy?"*, and a second answer to it is two
+ * answers waiting to disagree.
+ */
+export function classifyWorkspaceMembers(repoRoot, fs) {
+    const globs = workspaceGlobs(repoRoot, fs).filter((glob) => !glob.startsWith('!'));
+    const members = workspaceMembers(repoRoot, fs);
+    const globCoverage = new Map();
+    const matchedGlobs = new Map();
+    for (const glob of globs) {
+        const dirs = new Set(expandWorkspaceGlob(repoRoot, glob, fs));
+        let covered = 0;
+        for (const member of members) {
+            if (!dirs.has(member.dir))
+                continue;
+            covered += 1;
+            const list = matchedGlobs.get(member.dir) ?? [];
+            list.push(glob);
+            matchedGlobs.set(member.dir, list);
+        }
+        globCoverage.set(glob, covered);
+    }
+    return {
+        members: members.map((member) => {
+            const own = matchedGlobs.get(member.dir) ?? [];
+            return { ...member, family: own.some((glob) => glob.includes('*')), globs: own };
+        }),
+        globCoverage,
+    };
+}
+/**
+ * The npm scopes those members are published under, sorted, each with its
+ * trailing slash — `['@endora-commerce/']` today.
+ *
+ * Derived rather than declared, because a second scope is exactly what feature
+ * 080 introduces and the one thing that must not happen is a guard that keeps
+ * answering about the first one. An unscoped member (`backend`, `admin`,
+ * `docs`) contributes no scope: nothing resolves it by specifier, so there is
+ * no link for a guard to classify.
+ */
+export function workspaceScopes(members) {
+    const scopes = new Set();
+    for (const member of members) {
+        const cut = member.name.indexOf('/');
+        if (member.name.startsWith('@') && cut > 0)
+            scopes.add(`${member.name.slice(0, cut)}/`);
+    }
+    return [...scopes].sort();
+}
+/**
+ * The module id a member declares about itself, or `null`.
+ *
+ * The `endora` block is the package's own statement, the same one
+ * `src/packages/installed-packages.ts` reads at boot, so a module package is
+ * recognised wherever the workspace globs put it and whatever its directory is
+ * called. Nothing here reads the npm name's spelling — a `mod-` prefix rule
+ * would be a derived fact written down (D-100).
+ */
+export function declaredModuleId(member) {
+    const endora = member.manifest['endora'];
+    if (typeof endora !== 'object' || endora === null || Array.isArray(endora))
+        return null;
+    const block = endora;
+    if (block['type'] !== 'module')
+        return null;
+    const id = block['id'];
+    return typeof id === 'string' && id.length > 0 ? id : null;
+}
+/**
+ * Every workspace member that declares itself a module, sorted by directory.
+ *
+ * Unfiltered by the manifest index on purpose, which is the one difference from
+ * `lib/module-roots.ts`'s package half: that derivation is answering "which
+ * *registered* modules live in a package", and a consumer outside the backend —
+ * the Tailwind source guard in `scripts/tailwind-source-scan.ts` — is answering
+ * "which packages can ship UI". A package that ships a screen before its
+ * manifest reaches the generated index still ships the screen.
+ */
+export function modulePackages(members) {
+    const packages = [];
+    for (const member of members) {
+        const moduleId = declaredModuleId(member);
+        if (moduleId === null)
+            continue;
+        packages.push({ dir: member.dir, name: member.name, moduleId });
+    }
+    return packages.sort((left, right) => left.dir.localeCompare(right.dir));
+}
+/**
+ * Does a member declare itself a package whose sources are **admin UI**?
+ *
+ * The third value of the `endora.type` block, beside `'platform'` (the host)
+ * and `'module'` (a module package), and read the same way: the package's own
+ * statement about itself, over the members `pnpm-workspace.yaml` globs. Nothing
+ * here reads a directory or a name — `packages/admin-kit` and
+ * `@endora-commerce/admin-kit` appear in no predicate, which is what lets a
+ * second admin-ui package arrive under any name and be judged from its first
+ * commit (feature 091, P5c).
+ *
+ * ## Why this is not D-171's refused self-certification
+ *
+ * D-171 refused an `endora`-block field that would have **exempted** a package
+ * from `check:module-boundary`'s ledger: an exemption from a rule, issued by
+ * the party the rule measures. This declaration is the opposite direction. It
+ * puts the package *into* two populations — `i18n:hardcoded`'s walk and
+ * `check:admin-zones`' third `foreign-module-id` population — so declaring it
+ * buys obligations and nothing else, and the only thing an author gains by
+ * omitting it is that their hard-coded strings and their foreign module ids go
+ * unread.
+ *
+ * Forgetting it therefore has to fail loudly, and it does: `i18n:hardcoded`'s
+ * baseline is keyed by path and two-way, so a file that arrives in an
+ * undeclared package is a ledger entry naming a path the walk never opened —
+ * `drained`, exit 1 — in the same run. That is the property that makes a
+ * declaration safe here and an exemption unsafe there.
+ */
+export function declaresAdminUi(member) {
+    const endora = member.manifest['endora'];
+    if (typeof endora !== 'object' || endora === null || Array.isArray(endora))
+        return false;
+    return endora['type'] === 'admin-ui';
+}
+/**
+ * Every workspace member that declares itself admin UI, sorted by directory.
+ *
+ * The shape {@link modulePackages} has, for the same reason: one derivation of
+ * "which packages ship admin code", so the two instruments that walk them
+ * cannot come to disagree about the population.
+ */
+export function adminUiPackages(members) {
+    return members
+        .filter((member) => declaresAdminUi(member))
+        .map((member) => ({ dir: member.dir, name: member.name }))
+        .sort((left, right) => left.dir.localeCompare(right.dir));
+}
+/**
+ * Is this manifest a Next application — the shape the reference storefront has?
+ *
+ * A member qualifies by declaring `next` as a dependency **and** a `build`
+ * script that runs it. Both halves are needed: a package that merely depends on
+ * `next` may be a component library that peers on it, and a `build` script
+ * naming `next build` in a manifest that does not depend on `next` is a
+ * misconfiguration rather than an application.
+ *
+ * It lives here, beside the derivation of *which directories are members*,
+ * because two consumers ask the same question of the same population and a
+ * second copy of the predicate is two answers waiting to disagree about which
+ * application they are talking about: `new-storefront/reference.ts` resolves the
+ * storefront it copies, and `check-release-intent.ts` resolves the one whose
+ * dependency closure is the publication set (feature 104, FR-001).
+ */
+export function isNextApplication(manifest) {
+    const dependencies = manifest['dependencies'];
+    const scripts = manifest['scripts'];
+    const declaresNext = typeof dependencies === 'object' && dependencies !== null && 'next' in dependencies;
+    const build = typeof scripts === 'object' && scripts !== null
+        ? scripts['build']
+        : undefined;
+    return declaresNext && typeof build === 'string' && /\bnext build\b/.test(build);
+}
+//# sourceMappingURL=workspace-packages.js.map

package/dist/lib/workspace-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-packages.js","sourceRoot":"","sources":["../../src/lib/workspace-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2BjC,6FAA6F;AAC7F,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,QAAQ,CAAC,IAAY;YACnB,IAAI,CAAC;gBACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,eAAe,CAAC,IAAY;YAC1B,IAAI,CAAC;gBACH,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;oBACvC,IAAI,CAAC;wBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,EAAe;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,EAAe;IACpD,OAAO,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,EAAe,EAAE,MAAgB,EAAE;IACxE,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAAY,EACZ,EAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC7C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,EAAe;IAEf,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK;SACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACtC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAS;YAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAe;IAChE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,0BAA0B,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QACrF,MAAM,QAAQ,GAAG,MAAiC,CAAC;QACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5D,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAoCD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,EAAe;IAEf,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACnF,CAAC,CAAC;QACF,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,OAAmC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAYD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,KAAK,GAAG,MAAiC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,OAAmC;IAChE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,OAAQ,MAAkC,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAmC;IAEnC,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;SACzD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2C;IAC3E,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,YAAY,GAChB,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,IAAI,MAAM,IAAI,YAAY,CAAC;IACtF,MAAM,KAAK,GACT,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAC7C,CAAC,CAAE,OAAmC,CAAC,OAAO,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC"}