@memberjunction/cli 6.1.0-edge.2 → 6.1.0-edge.4

package/dist/lib/dev-workspace/dir-flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dir-flag.d.ts","sourceRoot":"","sources":["../../../src/lib/dev-workspace/dir-flag.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAIjG;AAED,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAI3D"}

package/dist/lib/dev-workspace/dir-flag.js

@@ -0,0 +1,24 @@
+/** Environment variable every dev workspace command binds to its `--dir` flag. */
+export const WORKSPACE_DIR_ENV_VAR = 'MJ_DEV_WORKSPACE_DIR';
+/**
+ * Determines which input supplied `--dir`, mirroring oclif's own precedence: an
+ * explicit flag beats the environment variable, which beats the default. Pure —
+ * the caller passes its raw argv and the environment value, so this never reads
+ * `process.env` itself.
+ */
+export function ResolveDirSource(argv, envValue) {
+    if (argv.some((arg) => arg === '--dir' || arg.startsWith('--dir=')))
+        return 'flag';
+    if (envValue !== undefined && envValue.length > 0)
+        return 'env';
+    return 'default';
+}
+/** How a resolved `--dir` should be described in output. */
+export function DescribeDirSource(source) {
+    if (source === 'flag')
+        return '--dir flag';
+    if (source === 'env')
+        return `$${WORKSPACE_DIR_ENV_VAR}`;
+    return 'default (current directory)';
+}
+//# sourceMappingURL=dir-flag.js.map

package/dist/lib/dev-workspace/dir-flag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dir-flag.js","sourceRoot":"","sources":["../../../src/lib/dev-workspace/dir-flag.ts"],"names":[],"mappings":"AAYA,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuB,EAAE,QAA4B;IACpF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,qBAAqB,EAAE,CAAC;IACzD,OAAO,6BAA6B,CAAC;AACvC,CAAC"}

package/dist/lib/dev-workspace/doctor.d.ts

@@ -0,0 +1,96 @@
+import type { DirSource } from './types.js';
+/**
+ * Packages that MUST resolve to exactly one copy across a joined workspace.
+ * Angular's DI, RxJS's operator identity checks and MJ's Global Object Store all
+ * key off module identity, so a second copy is not a duplicate — it is a second,
+ * mutually invisible runtime.
+ */
+export declare const SINGLETON_PACKAGES: readonly string[];
+/**
+ * Outcome of one health check. `skip` means the check did not apply — it is never a
+ * claim of health, which is exactly why it is not folded into `pass`.
+ */
+export type DoctorSeverity = 'pass' | 'warn' | 'fail' | 'skip';
+/** One health-check result: what was checked, how it went, and for warn/fail what to do. */
+export interface DoctorCheck {
+    Name: string;
+    Severity: DoctorSeverity;
+    Detail: string;
+}
+/** One decoded pnpm virtual-store directory name. */
+export interface StoreEntry {
+    /** Package name with the scope separator decoded (`@angular+core` -> `@angular/core`). */
+    Name: string;
+    /** Concrete version, peer suffix stripped. */
+    Version: string;
+}
+/** Distinct versions of one singleton package found in the parent's store. */
+export interface SingletonVersions {
+    Package: string;
+    /** Sorted distinct versions — always at least one entry. */
+    Versions: string[];
+}
+/** What the one-copy census read out of `<parent>/node_modules/.pnpm`. */
+export interface StoreCensus {
+    /** False when the parent has no virtual store — nothing has been installed there. */
+    StorePresent: boolean;
+    /** Every singleton package present in the store. Packages absent from it are omitted, not zero-filled. */
+    Packages: SingletonVersions[];
+    /**
+     * Store entries that are not `name@version` (the store's own `node_modules`,
+     * `file:`/`link:` entries). Counted and reported rather than silently dropped.
+     */
+    UnparsedEntryCount: number;
+}
+/** Everything `dev workspace doctor` reports. */
+export interface DoctorReport {
+    ParentDir: string;
+    DirSource: DirSource;
+    Checks: DoctorCheck[];
+    Census: StoreCensus;
+}
+/**
+ * Decodes one `<parent>/node_modules/.pnpm` directory name into package name and
+ * version, or null when the entry is not a resolved package (the store's own
+ * `node_modules`, `file+..+repo@file+..+repo` link entries, and anything else whose
+ * version segment does not start with a digit).
+ *
+ * Peer suffixes come in BOTH shapes and both are handled — pnpm 10.33 writes the
+ * underscore form (verified against a real store: `@angular+core@21.1.3_@angular+
+ * compiler@21.1.3_rxjs@7.8.2_zone.js@0.16.0`), other versions write the parenthesised
+ * form (`@angular+common@21.1.3(@angular+core@21.1.3)`). Both carry `@` characters
+ * INSIDE the suffix, which is why the version is taken from the name/version
+ * separator forwards and then truncated, never from the LAST `@` backwards — on the
+ * entry above, the last `@` yields `0.16.0`, a version of a different package.
+ * Splitting the VERSION segment (not the whole entry) at `_` is safe: semver forbids
+ * `_` in a version, and a package name containing one is never reached. Pure.
+ */
+export declare function ParseStoreEntry(entryName: string): StoreEntry | null;
+/**
+ * Counts the distinct versions of each singleton package in the parent's pnpm
+ * virtual store, reading DIRECTORY NAMES ONLY — a store entry name already carries
+ * `name@version`, so no package.json is opened and the whole census is one
+ * `readdirSync`. An absent store is reported as `StorePresent: false`, never as a
+ * clean bill of health.
+ *
+ * KNOWN LIMIT, stated so the PASS is not read as more than it is: pnpm gives
+ * workspace-linked packages no virtual-store entry at all (verified — an MJ
+ * checkout's own store holds zero `@memberjunction+core@…` entries), so this counts
+ * copies IN THE PARENT STORE. A registry copy sitting alongside a workspace link is
+ * one store entry and reads as one copy. Catching that is the job of the family
+ * `workspace:*` overrides the generator emits, not of this census.
+ *
+ * SIDE EFFECT: one read-only directory listing.
+ */
+export declare function CollectSingletonCensus(parentDir: string): StoreCensus;
+/**
+ * Runs every health check at a parent directory. `activePnpmVersion` comes from the
+ * caller (a spawn — see `pnpm.ts`) and `dirSource` likewise, so this module reads
+ * neither processes nor the environment. Read-only.
+ */
+export declare function CollectDoctorReport(parentDir: string, activePnpmVersion: string | null, dirSource: DirSource): DoctorReport;
+/** True when any check failed — the command's exit-code decision. Pure. */
+export declare function DoctorHasFailures(report: DoctorReport): boolean;
+/** Renders a DoctorReport as the terminal report. Pure. */
+export declare function RenderDoctor(report: DoctorReport): string;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/lib/dev-workspace/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/lib/dev-workspace/doctor.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,YAAY,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAQ/C,CAAC;AAQF;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE/D,4FAA4F;AAC5F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qDAAqD;AACrD,MAAM,WAAW,UAAU;IACzB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,qFAAqF;IACrF,YAAY,EAAE,OAAO,CAAC;IACtB,0GAA0G;IAC1G,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;CACrB;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQpE;AAgDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAOrE;AAiMD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,SAAS,EAAE,SAAS,GACnB,YAAY,CAsBd;AAUD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAE/D;AAWD,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAYzD"}

package/dist/lib/dev-workspace/doctor.js

@@ -0,0 +1,400 @@
+/**
+ * Health checks for `mj dev workspace doctor`.
+ *
+ * SIDE EFFECTS: READ-ONLY filesystem access, and nothing else. Two reads happen
+ * here — the workspace state collection delegated to `status.ts` (existence checks
+ * plus small file reads), and ONE `readdirSync` of the parent's pnpm virtual store
+ * for the one-copy census. Doctor never writes, never deletes, never spawns a
+ * process (the active pnpm version is probed by the command and passed in, the same
+ * contract `CollectWorkspaceStatus` uses) and never touches the network.
+ *
+ * The census exists because the failure that actually bites a joined workspace is
+ * not a missing file — it is TWO COPIES of a package the runtime requires exactly
+ * one of. Two `@angular/core`s give `NG0203 inject() must be called from an
+ * injection context`; two `@memberjunction/global`s give two Global Object Stores,
+ * so every `BaseSingleton` silently becomes two singletons. Both look like
+ * application bugs and neither names the real cause, so doctor names it.
+ *
+ * @module lib/dev-workspace/doctor
+ */
+import { existsSync, readdirSync } from 'node:fs';
+import path from 'node:path';
+import chalk from 'chalk';
+import { SENTINEL_MARKER } from './build.js';
+import { LOCKFILE_NAME, NODE_MODULES_NAME } from './clean.js';
+import { DescribeDirSource } from './dir-flag.js';
+import { CollectWorkspaceStatus } from './status.js';
+import { SENTINEL_FILE_NAME } from './write.js';
+/**
+ * Packages that MUST resolve to exactly one copy across a joined workspace.
+ * Angular's DI, RxJS's operator identity checks and MJ's Global Object Store all
+ * key off module identity, so a second copy is not a duplicate — it is a second,
+ * mutually invisible runtime.
+ */
+export const SINGLETON_PACKAGES = [
+    '@angular/core',
+    '@angular/common',
+    '@angular/compiler',
+    'rxjs',
+    'zone.js',
+    '@memberjunction/core',
+    '@memberjunction/global',
+];
+/** Hard cap on virtual-store entries the census will read; exceeding it throws rather than truncating. */
+const MAX_STORE_ENTRIES = 100_000;
+/** The pnpm virtual store, relative to the workspace parent. */
+const STORE_REL_PATH = path.join(NODE_MODULES_NAME, '.pnpm');
+/**
+ * Index of the `@` that separates name from version in a store directory name:
+ * the SECOND `@` for a scoped package (`@angular+core@21.1.3`), the first
+ * otherwise (`rxjs@7.8.1`). Returns -1 when there is none.
+ *
+ * Deliberately not "the last `@`": a peer-suffixed entry carries `@` characters
+ * INSIDE its suffix — `@angular+common@21.1.3(@angular+core@21.1.3)` — so the last
+ * `@` sits in the parentheses and the naive split yields nonsense.
+ */
+function findVersionSeparator(entry) {
+    return entry.startsWith('@') ? entry.indexOf('@', 1) : entry.indexOf('@');
+}
+/** pnpm encodes the scope separator as `+`, and only that one: `@angular+core` -> `@angular/core`. */
+function decodeStoreName(encodedName) {
+    return encodedName.startsWith('@') ? encodedName.replace('+', '/') : encodedName;
+}
+/**
+ * Decodes one `<parent>/node_modules/.pnpm` directory name into package name and
+ * version, or null when the entry is not a resolved package (the store's own
+ * `node_modules`, `file+..+repo@file+..+repo` link entries, and anything else whose
+ * version segment does not start with a digit).
+ *
+ * Peer suffixes come in BOTH shapes and both are handled — pnpm 10.33 writes the
+ * underscore form (verified against a real store: `@angular+core@21.1.3_@angular+
+ * compiler@21.1.3_rxjs@7.8.2_zone.js@0.16.0`), other versions write the parenthesised
+ * form (`@angular+common@21.1.3(@angular+core@21.1.3)`). Both carry `@` characters
+ * INSIDE the suffix, which is why the version is taken from the name/version
+ * separator forwards and then truncated, never from the LAST `@` backwards — on the
+ * entry above, the last `@` yields `0.16.0`, a version of a different package.
+ * Splitting the VERSION segment (not the whole entry) at `_` is safe: semver forbids
+ * `_` in a version, and a package name containing one is never reached. Pure.
+ */
+export function ParseStoreEntry(entryName) {
+    const withoutPeers = entryName.split('(')[0];
+    const separator = findVersionSeparator(withoutPeers);
+    if (separator <= 0)
+        return null;
+    const encodedName = withoutPeers.slice(0, separator);
+    const version = withoutPeers.slice(separator + 1).split('_')[0];
+    if (!/^\d/.test(version))
+        return null;
+    return { Name: decodeStoreName(encodedName), Version: version };
+}
+/**
+ * Directory names in the virtual store. Reads the directory exactly once and is
+ * bounded by {@link MAX_STORE_ENTRIES} — hitting the cap throws rather than
+ * silently censusing a prefix of the store, which would be a false PASS.
+ */
+function readStoreEntries(storeDir) {
+    let dirents;
+    try {
+        dirents = readdirSync(storeDir, { withFileTypes: true });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Cannot read the package store at ${storeDir}: ${message}`);
+    }
+    if (dirents.length > MAX_STORE_ENTRIES) {
+        throw new Error(`${storeDir} holds ${dirents.length} entries, over the ${MAX_STORE_ENTRIES} cap — refusing to census it`);
+    }
+    return dirents.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+}
+/** Groups parsed store entries into the distinct versions of each singleton package. Pure. */
+function tallySingletons(entryNames) {
+    const wanted = new Set(SINGLETON_PACKAGES);
+    const found = new Map();
+    let unparsed = 0;
+    for (const entryName of entryNames) {
+        const entry = ParseStoreEntry(entryName);
+        if (entry === null) {
+            unparsed++;
+            continue;
+        }
+        if (!wanted.has(entry.Name))
+            continue;
+        const versions = found.get(entry.Name) ?? new Set();
+        versions.add(entry.Version);
+        found.set(entry.Name, versions);
+    }
+    const packages = [];
+    for (const name of SINGLETON_PACKAGES) {
+        const versions = found.get(name);
+        if (versions === undefined)
+            continue;
+        packages.push({ Package: name, Versions: [...versions].sort() });
+    }
+    return { StorePresent: true, Packages: packages, UnparsedEntryCount: unparsed };
+}
+/**
+ * Counts the distinct versions of each singleton package in the parent's pnpm
+ * virtual store, reading DIRECTORY NAMES ONLY — a store entry name already carries
+ * `name@version`, so no package.json is opened and the whole census is one
+ * `readdirSync`. An absent store is reported as `StorePresent: false`, never as a
+ * clean bill of health.
+ *
+ * KNOWN LIMIT, stated so the PASS is not read as more than it is: pnpm gives
+ * workspace-linked packages no virtual-store entry at all (verified — an MJ
+ * checkout's own store holds zero `@memberjunction+core@…` entries), so this counts
+ * copies IN THE PARENT STORE. A registry copy sitting alongside a workspace link is
+ * one store entry and reads as one copy. Catching that is the job of the family
+ * `workspace:*` overrides the generator emits, not of this census.
+ *
+ * SIDE EFFECT: one read-only directory listing.
+ */
+export function CollectSingletonCensus(parentDir) {
+    if (!path.isAbsolute(parentDir)) {
+        throw new Error(`CollectSingletonCensus requires an absolute path, got: ${parentDir}`);
+    }
+    const storeDir = path.join(parentDir, STORE_REL_PATH);
+    if (!existsSync(storeDir))
+        return { StorePresent: false, Packages: [], UnparsedEntryCount: 0 };
+    return tallySingletons(readStoreEntries(storeDir));
+}
+/** The parent must be a plain directory holding sibling clones — never a git repo root itself. */
+function checkParentShape(status) {
+    if (!status.ParentIsGitRepo) {
+        return { Name: 'parent directory', Severity: 'pass', Detail: 'a plain directory, not a git repo root' };
+    }
+    return {
+        Name: 'parent directory',
+        Severity: 'fail',
+        Detail: 'this directory is a git repo root (.git present) — a workspace parent must be the plain directory that ' +
+            'HOLDS the sibling clones; re-run with --dir pointing at their common parent',
+    };
+}
+/** All generated files must be present; a missing one means the workspace was never (fully) generated. */
+function checkGeneratedFiles(status) {
+    const missing = status.Files.filter((file) => !file.Exists).map((file) => file.Name);
+    if (missing.length === 0) {
+        return { Name: 'workspace files', Severity: 'pass', Detail: `all ${status.Files.length} generated files present` };
+    }
+    return {
+        Name: 'workspace files',
+        Severity: 'fail',
+        Detail: `missing: ${missing.join(', ')} — run \`mj dev workspace --dir ${status.ParentDir}\` to generate them`,
+    };
+}
+/** The lockfile and node_modules come from `pnpm install`, not the generator — absence is incomplete, not broken. */
+function checkInstallArtifacts(status) {
+    const missing = [];
+    if (!status.LockfileExists)
+        missing.push(LOCKFILE_NAME);
+    if (!status.NodeModulesExists)
+        missing.push(NODE_MODULES_NAME);
+    if (missing.length === 0) {
+        return { Name: 'install', Severity: 'pass', Detail: `${LOCKFILE_NAME} and ${NODE_MODULES_NAME} present` };
+    }
+    return {
+        Name: 'install',
+        Severity: 'warn',
+        Detail: `missing ${missing.join(' and ')} — run \`pnpm install\` at ${status.ParentDir}`,
+    };
+}
+/** The sentinel is what proves this workspace came from the generator, and what `clean` requires. */
+function checkSentinel(status) {
+    const sentinel = status.Sentinel;
+    if (sentinel.Kind === 'valid') {
+        const members = sentinel.Sentinel.members.join(', ') || '(none recorded)';
+        return { Name: 'sentinel', Severity: 'pass', Detail: `${SENTINEL_FILE_NAME} written by ${SENTINEL_MARKER} (members: ${members})` };
+    }
+    if (sentinel.Kind === 'invalid') {
+        return {
+            Name: 'sentinel',
+            Severity: 'warn',
+            Detail: `${SENTINEL_FILE_NAME} is present but not ours (${sentinel.Reason}) — clean needs --force`,
+        };
+    }
+    return {
+        Name: 'sentinel',
+        Severity: 'warn',
+        Detail: `no ${SENTINEL_FILE_NAME} — hand-made or pre-sentinel workspace; clean needs --force`,
+    };
+}
+/** The generated pin and the pnpm actually running at the parent must be the same version. */
+function checkPnpmVersion(status) {
+    const pinned = status.PinnedPnpm === null ? null : status.PinnedPnpm.slice('pnpm@'.length);
+    if (pinned === null) {
+        return { Name: 'pnpm version', Severity: 'skip', Detail: 'no pnpm pin at the parent (no generated package.json)' };
+    }
+    if (status.ActivePnpmVersion === null) {
+        return { Name: 'pnpm version', Severity: 'warn', Detail: `pinned ${pinned}, but pnpm is not runnable at the parent` };
+    }
+    if (status.ActivePnpmVersion === pinned) {
+        return { Name: 'pnpm version', Severity: 'pass', Detail: `pinned ${pinned}, active ${status.ActivePnpmVersion} — match` };
+    }
+    return {
+        Name: 'pnpm version',
+        Severity: 'warn',
+        Detail: `pinned ${pinned}, active ${status.ActivePnpmVersion} — MISMATCH; run \`corepack enable\` so the pin is honored`,
+    };
+}
+/**
+ * Every member named in pnpm-workspace.yaml must exist on disk. This is a FAIL, not
+ * a warning: the generated parent manifest carries a `workspace:*` override for each
+ * member-provided package name, so a member whose checkout is gone makes the next
+ * `pnpm install` fail outright rather than degrade.
+ */
+function checkMemberDirs(status) {
+    if (status.Members.length === 0) {
+        return { Name: 'member dirs', Severity: 'skip', Detail: 'no pnpm-workspace.yaml — no members to check' };
+    }
+    if (status.MissingMemberDirs.length === 0) {
+        return { Name: 'member dirs', Severity: 'pass', Detail: `all ${status.Members.length} member directories present` };
+    }
+    return {
+        Name: 'member dirs',
+        Severity: 'fail',
+        Detail: `in pnpm-workspace.yaml but missing on disk: ${status.MissingMemberDirs.join(', ')} — the parent manifest ` +
+            `overrides each member-provided package to workspace:*, so pnpm install will fail; re-clone them or ` +
+            `re-run \`mj dev workspace --force\` to regenerate without them`,
+    };
+}
+/** Repos on disk that qualify as members but are not in the workspace resolve against their own installs. */
+function checkCandidates(status) {
+    if (status.DetectedCandidates.length === 0) {
+        return { Name: 'candidates', Severity: 'skip', Detail: 'no member-candidate repos detected at the parent' };
+    }
+    if (status.CandidatesNotInWorkspace.length === 0) {
+        return {
+            Name: 'candidates',
+            Severity: 'pass',
+            Detail: `all ${status.DetectedCandidates.length} detected repos are workspace members`,
+        };
+    }
+    return {
+        Name: 'candidates',
+        Severity: 'warn',
+        Detail: `detected on disk but not in the workspace: ${status.CandidatesNotInWorkspace.join(', ')} — they resolve ` +
+            `against their own installs, not this workspace; re-run \`mj dev workspace --force\` to include them`,
+    };
+}
+/**
+ * A member carrying its OWN package store has forked resolution away from the
+ * workspace. Note what does NOT count: a plain `node_modules` inside a member is
+ * what a healthy parent install creates (symlinks into the parent store) — only a
+ * member-root `.pnpm` store or npm's `.package-lock.json` marker proves a
+ * standalone install, which is the distinction `status.ts` already encodes.
+ *
+ * Scope, stated in the PASS text rather than implied: this reads the member ROOT
+ * only. A repo whose root tree was deleted but whose nested per-package trees
+ * survive (the half-finished cleanup #3795 describes) passes here — enumerating
+ * those is `--clean-members`' depth-independent walk, not a health check's job.
+ */
+function checkStandaloneInstalls(status) {
+    if (status.MembersWithStandaloneInstalls.length === 0) {
+        return {
+            Name: 'standalone installs',
+            Severity: 'pass',
+            Detail: 'no member root carries its own package store (a member node_modules from the parent install is normal; ' +
+                'nested per-package trees are not scanned — `dev workspace --clean-members` removes those)',
+        };
+    }
+    return {
+        Name: 'standalone installs',
+        Severity: 'fail',
+        Detail: `${status.MembersWithStandaloneInstalls.join(', ')} — each has its own package store, so its code resolves ` +
+            `against that store instead of this workspace (split singletons, stale deps). ` +
+            `Fix: re-run \`mj dev workspace --clean-members\`.`,
+    };
+}
+/** Appends the unparsed-entry tally to a census detail, so dropped store entries are never silent. */
+function withUnparsedNote(detail, census) {
+    const count = census.UnparsedEntryCount;
+    if (count === 0)
+        return detail;
+    const noun = count === 1 ? 'entry is' : 'entries are';
+    return `${detail} (${count} store ${noun} not name@version — links and the store's own node_modules)`;
+}
+/** Exactly one version of each singleton package may exist in the parent's store. */
+function checkOneCopyCensus(census) {
+    const name = 'one-copy census';
+    if (!census.StorePresent) {
+        return { Name: name, Severity: 'skip', Detail: `no ${STORE_REL_PATH} at the parent — no pnpm package store to census` };
+    }
+    if (census.Packages.length === 0) {
+        return { Name: name, Severity: 'skip', Detail: withUnparsedNote('none of the single-copy packages are installed here', census) };
+    }
+    const duplicated = census.Packages.filter((entry) => entry.Versions.length > 1);
+    if (duplicated.length === 0) {
+        const listed = census.Packages.map((entry) => `${entry.Package}@${entry.Versions[0]}`).join(', ');
+        return { Name: name, Severity: 'pass', Detail: withUnparsedNote(`one copy each in the parent store: ${listed}`, census) };
+    }
+    const broken = duplicated.map((entry) => `${entry.Package} (${entry.Versions.join(', ')})`).join('; ');
+    return {
+        Name: name,
+        Severity: 'fail',
+        Detail: `more than one version in the parent store: ${broken} — these must be single-copy (Angular DI and MJ's ` +
+            `Global Object Store key off module identity, so a second copy is a second, invisible runtime). ` +
+            `Fix: re-run \`mj dev workspace --force\` to re-derive the pins, then \`pnpm install\` at the parent.`,
+    };
+}
+/**
+ * Runs every health check at a parent directory. `activePnpmVersion` comes from the
+ * caller (a spawn — see `pnpm.ts`) and `dirSource` likewise, so this module reads
+ * neither processes nor the environment. Read-only.
+ */
+export function CollectDoctorReport(parentDir, activePnpmVersion, dirSource) {
+    if (!path.isAbsolute(parentDir)) {
+        throw new Error(`CollectDoctorReport requires an absolute path, got: ${parentDir}`);
+    }
+    const status = CollectWorkspaceStatus(parentDir, activePnpmVersion, dirSource);
+    const census = CollectSingletonCensus(parentDir);
+    return {
+        ParentDir: parentDir,
+        DirSource: dirSource,
+        Census: census,
+        Checks: [
+            checkParentShape(status),
+            checkGeneratedFiles(status),
+            checkInstallArtifacts(status),
+            checkSentinel(status),
+            checkPnpmVersion(status),
+            checkMemberDirs(status),
+            checkCandidates(status),
+            checkStandaloneInstalls(status),
+            checkOneCopyCensus(census),
+        ],
+    };
+}
+/** Severity tag printed at the head of each line. */
+const SEVERITY_TAGS = {
+    pass: chalk.green('[PASS]'),
+    warn: chalk.yellow('[WARN]'),
+    fail: chalk.red('[FAIL]'),
+    skip: chalk.dim('[SKIP]'),
+};
+/** True when any check failed — the command's exit-code decision. Pure. */
+export function DoctorHasFailures(report) {
+    return report.Checks.some((check) => check.Severity === 'fail');
+}
+/** Counts each severity and states the exit-code consequence plainly. Pure. */
+function renderSummary(report) {
+    const countOf = (severity) => report.Checks.filter((check) => check.Severity === severity).length;
+    const failed = countOf('fail');
+    const summary = `${countOf('pass')} passed, ${countOf('warn')} warned, ${failed} failed, ${countOf('skip')} skipped`;
+    if (failed === 0)
+        return chalk.green(`${summary} — no failures.`);
+    return chalk.red(`${summary} — doctor exits non-zero.`);
+}
+/** Renders a DoctorReport as the terminal report. Pure. */
+export function RenderDoctor(report) {
+    const lines = [
+        chalk.bold(`Workspace doctor: ${report.ParentDir}`),
+        chalk.dim(`  resolved from: ${DescribeDirSource(report.DirSource)}`),
+        '',
+    ];
+    for (const check of report.Checks) {
+        lines.push(`${SEVERITY_TAGS[check.Severity]} ${check.Name}: ${check.Detail}`);
+    }
+    lines.push('');
+    lines.push(renderSummary(report));
+    return lines.join('\n');
+}
+//# sourceMappingURL=doctor.js.map

package/dist/lib/dev-workspace/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/lib/dev-workspace/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,MAAM;IACN,SAAS;IACT,sBAAsB;IACtB,wBAAwB;CACzB,CAAC;AAEF,0GAA0G;AAC1G,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,gEAAgE;AAChE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAmD7D;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,sGAAsG;AACtG,SAAS,eAAe,CAAC,WAAmB;IAC1C,OAAO,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,UAAU,OAAO,CAAC,MAAM,sBAAsB,iBAAiB,8BAA8B,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,8FAA8F;AAC9F,SAAS,eAAe,CAAC,UAA6B;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0DAA0D,SAAS,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAC/F,OAAO,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,kGAAkG;AAClG,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC1G,CAAC;IACD,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,yGAAyG;YACzG,6EAA6E;KAChF,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,mBAAmB,CAAC,MAAuB;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,0BAA0B,EAAE,CAAC;IACrH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,MAAM,CAAC,SAAS,qBAAqB;KAC/G,CAAC;AACJ,CAAC;AAED,qHAAqH;AACrH,SAAS,qBAAqB,CAAC,MAAuB;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,QAAQ,iBAAiB,UAAU,EAAE,CAAC;IAC5G,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,MAAM,CAAC,SAAS,EAAE;KACzF,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,SAAS,aAAa,CAAC,MAAuB;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,eAAe,eAAe,cAAc,OAAO,GAAG,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG,kBAAkB,6BAA6B,QAAQ,CAAC,MAAM,yBAAyB;SACnG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM,kBAAkB,6DAA6D;KAC9F,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IACrH,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,MAAM,0CAA0C,EAAE,CAAC;IACxH,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,MAAM,YAAY,MAAM,CAAC,iBAAiB,UAAU,EAAE,CAAC;IAC5H,CAAC;IACD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU,MAAM,YAAY,MAAM,CAAC,iBAAiB,4DAA4D;KACzH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAuB;IAC9C,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,6BAA6B,EAAE,CAAC;IACtH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,+CAA+C,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;YAC3G,qGAAqG;YACrG,gEAAgE;KACnE,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,SAAS,eAAe,CAAC,MAAuB;IAC9C,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,MAAM,uCAAuC;SACvF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,8CAA8C,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAC1G,qGAAqG;KACxG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAAC,MAAuB;IACtD,IAAI,MAAM,CAAC,6BAA6B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,MAAM,EACJ,yGAAyG;gBACzG,2FAA2F;SAC9F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D;YAC5G,+EAA+E;YAC/E,mDAAmD;KACtD,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAmB;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACxC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IACtD,OAAO,GAAG,MAAM,KAAK,KAAK,UAAU,IAAI,6DAA6D,CAAC;AACxG,CAAC;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,MAAM,IAAI,GAAG,iBAAiB,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,kDAAkD,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,qDAAqD,EAAE,MAAM,CAAC,EAAE,CAAC;IACnI,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,sCAAsC,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5H,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvG,OAAO;QACL,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,8CAA8C,MAAM,oDAAoD;YACxG,iGAAiG;YACjG,sGAAsG;KACzG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,iBAAgC,EAChC,SAAoB;IAEpB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,SAAS,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE;YACN,gBAAgB,CAAC,MAAM,CAAC;YACxB,mBAAmB,CAAC,MAAM,CAAC;YAC3B,qBAAqB,CAAC,MAAM,CAAC;YAC7B,aAAa,CAAC,MAAM,CAAC;YACrB,gBAAgB,CAAC,MAAM,CAAC;YACxB,eAAe,CAAC,MAAM,CAAC;YACvB,eAAe,CAAC,MAAM,CAAC;YACvB,uBAAuB,CAAC,MAAM,CAAC;YAC/B,kBAAkB,CAAC,MAAM,CAAC;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,aAAa,GAAmC;IACpD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC3B,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC5B,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;IACzB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,MAAoB;IACzC,MAAM,OAAO,GAAG,CAAC,QAAwB,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC1H,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,YAAY,MAAM,YAAY,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;IACrH,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,iBAAiB,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAC;AAC1D,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,KAAK,GAAa;QACtB,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,SAAS,EAAE,CAAC;QACnD,KAAK,CAAC,GAAG,CAAC,oBAAoB,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,EAAE;KACH,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/dev-workspace/lockfile.d.ts

@@ -0,0 +1,62 @@
+import type { DevDepConflict, MemberLockfile, UnsupportedLockfile } from './types.js';
+/** True when the string is a plain concrete semver version. */
+export declare function IsResolvedVersion(version: string): boolean;
+/** Major-version number of a concrete resolution. Throws on non-semver input (precondition). */
+export declare function MajorOf(version: string): number;
+/**
+ * Compares two CONCRETE versions: numeric triple first; on a triple tie a
+ * release beats a prerelease, and two prereleases compare by tag string.
+ * Throws on non-semver input — callers filter through {@link IsResolvedVersion} first.
+ */
+export declare function CompareResolvedVersions(a: string, b: string): number;
+/** Parses a committed pnpm-lock.yaml. Only v9+ is readable; older formats return an unsupported marker. */
+export declare function ParsePnpmLockfile(lockText: string): MemberLockfile | UnsupportedLockfile;
+/** Parses a committed npm package-lock.json. Only lockfileVersion 2/3 is readable. */
+export declare function ParseNpmLockfile(lockText: string): MemberLockfile | UnsupportedLockfile;
+/**
+ * Reads a member's committed lockfile: `pnpm-lock.yaml` first, `package-lock.json`
+ * otherwise, null when the repo commits neither. An unsupported format comes back
+ * as a marker (the command warns); unparseable content throws — a corrupt
+ * lockfile must never silently become "no pins for this member".
+ */
+export declare function ReadMemberLockfile(repoPath: string): MemberLockfile | UnsupportedLockfile | null;
+/** The pure result of the cross-member pin derivation. */
+export interface LockfilePinsResult {
+    /**
+     * Override entries, sorted by key. Values are EXACT versions. Keys are plain
+     * names for single-major names, per-major selectors (`name@^N`) otherwise.
+     */
+    Pins: Record<string, string>;
+    /** Same-major disagreements the highest committed exact resolution won (key names the emitted selector). */
+    Conflicts: DevDepConflict[];
+    /** Names excluded because a workspace member provides them (workspace:* covers those). */
+    ExcludedFamilyNames: string[];
+}
+/** One member's candidate resolutions, tagged with the repo for conflict reporting. */
+export interface MemberLockfileCandidates {
+    Repo: string;
+    Lockfile: MemberLockfile;
+}
+/**
+ * Derives the parent `pnpm.overrides` pins from the members' committed lockfiles.
+ * Pure.
+ *
+ * AUTHORITY RULE (adversarial-review round 3): a version may vote only where a
+ * member DIRECTLY declares the name (its importers resolve it), plus `@types/*`
+ * at any depth minus those parented solely by registry copies of family
+ * packages. At-depth resolutions of ordinary packages are NOT candidates — a
+ * bizapps lockfile resolved with registry `@memberjunction/*` describes a graph
+ * that cannot exist in the generated workspace, and letting it vote handed the
+ * field's floated versions (`@cerebras` 1.91.0, `@foblex` 18.6.1) a win over
+ * MJ's committed 1.64.1/18.0.0.
+ *
+ * KEY SCOPING: at-depth majors still decide the KEY SHAPE — when any member's
+ * graph holds another major of a pinned name anywhere, the pin is emitted as a
+ * `name@^N` selector so transitive consumers of the other majors float within
+ * their declared ranges (never forced cross-major); only majors present among
+ * the candidates get a selector at all. Values are EXACT — `^resolved` provably
+ * passed 6 of 7 field-measured breaks through. Disagreements within a major
+ * among direct declarations are genuine: highest committed exact wins, reported.
+ */
+export declare function DeriveLockfilePins(members: readonly MemberLockfileCandidates[], familyNames: ReadonlySet<string>): LockfilePinsResult;
+//# sourceMappingURL=lockfile.d.ts.map

package/dist/lib/dev-workspace/lockfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../../../src/lib/dev-workspace/lockfile.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,cAAc,EAAgB,cAAc,EAAqB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAWvH,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,gGAAgG;AAChG,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAepE;AAwID,2GAA2G;AAC3G,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,mBAAmB,CAkBxF;AA4DD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,mBAAmB,CA4BvF;AAyBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,mBAAmB,GAAG,IAAI,CAahG;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,4GAA4G;IAC5G,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,uFAAuF;AACvF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;CAC1B;AA2BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,kBAAkB,CA8BrI"}