@mnaoumov/typescript-dev-toolkit 0.0.0 → 1.1.0

package/dist/lib/esm/npm.mjs

@@ -0,0 +1,155 @@
+/*
+THIS IS A GENERATED/BUNDLED FILE BY ESBUILD
+if you want to view the source, please visit the github repository of this plugin
+*/
+
+(function () {
+function ensureDisposeSymbols(symbolConstructor = Symbol) {
+  symbolConstructor.asyncDispose ??= symbolConstructor.for('Symbol.asyncDispose');
+  symbolConstructor.dispose ??= symbolConstructor.for('Symbol.dispose');
+}
+
+function ensureBrowserProcess() {
+  const browserProcess = {
+    browser: true,
+    cwd() {
+      return '/';
+    },
+    env: {},
+    platform: 'android'
+  };
+
+  const existingProcess = globalThis.process;
+
+  if (!existingProcess) {
+    globalThis.process = browserProcess;
+    return;
+  }
+
+  if (existingProcess.versions?.node) {
+    return;
+  }
+
+  const existingProcessRecord = existingProcess;
+
+  for (const [key, value] of Object.entries(browserProcess)) {
+    existingProcessRecord[key] ??= value;
+  }
+
+  existingProcessRecord['browser'] = true;
+}
+
+(function initEsm() {
+  ensureDisposeSymbols();
+  ensureBrowserProcess();
+})();
+})();
+
+import { normalizeOptionalProperties } from "@mnaoumov/typescript-lib/object-utils";
+import { ensureNonNullable } from "@mnaoumov/typescript-lib/type-guards";
+import {
+  editJson,
+  editJsonSync,
+  readJson,
+  readJsonSync,
+  writeJson,
+  writeJsonSync
+} from "./json.mjs";
+import { RepoPaths } from "./repo-paths.mjs";
+import { resolvePathFromRoot } from "./root.mjs";
+async function editNpmShrinkWrapJson(editFunction, options = {}) {
+  const {
+    cwd,
+    shouldSkipIfMissing
+  } = options;
+  await editJson(normalizeOptionalProperties({ editFunction, path: getNpmShrinkWrapJsonPath(cwd), shouldSkipIfMissing }));
+}
+async function editPackageJson(editFunction, options = {}) {
+  const {
+    cwd,
+    shouldSkipIfMissing
+  } = options;
+  await editJson(normalizeOptionalProperties({ editFunction, path: getPackageJsonPath(cwd), shouldSkipIfMissing }));
+}
+function editPackageJsonSync(editFunction, options = {}) {
+  const {
+    cwd,
+    shouldSkipIfMissing
+  } = options;
+  editJsonSync(normalizeOptionalProperties({ editFunction, path: getPackageJsonPath(cwd), shouldSkipIfMissing }));
+}
+async function editPackageLockJson(editFunction, options = {}) {
+  const {
+    cwd,
+    shouldSkipIfMissing
+  } = options;
+  await editJson(normalizeOptionalProperties({ editFunction, path: getPackageLockJsonPath(cwd), shouldSkipIfMissing }));
+}
+function editPackageLockJsonSync(editFunction, options = {}) {
+  const {
+    cwd,
+    shouldSkipIfMissing
+  } = options;
+  editJsonSync(normalizeOptionalProperties({ editFunction, path: getPackageLockJsonPath(cwd), shouldSkipIfMissing }));
+}
+function getNpmShrinkWrapJsonPath(cwd) {
+  return ensureNonNullable(
+    resolvePathFromRoot(normalizeOptionalProperties({ cwd, path: RepoPaths.NpmShrinkwrapJson })),
+    "Could not determine the npm-shrinkwrap.json path"
+  );
+}
+function getPackageJsonPath(cwd) {
+  return ensureNonNullable(
+    resolvePathFromRoot(normalizeOptionalProperties({ cwd, path: RepoPaths.PackageJson })),
+    "Could not determine the package.json path"
+  );
+}
+function getPackageLockJsonPath(cwd) {
+  return ensureNonNullable(
+    resolvePathFromRoot(normalizeOptionalProperties({ cwd, path: RepoPaths.PackageLockJson })),
+    "Could not determine the package-lock.json path"
+  );
+}
+async function readPackageJson(cwd) {
+  return await readJson(getPackageJsonPath(cwd));
+}
+function readPackageJsonSync(cwd) {
+  return readJsonSync(getPackageJsonPath(cwd));
+}
+async function readPackageLockJson(cwd) {
+  return await readJson(getPackageLockJsonPath(cwd));
+}
+function readPackageLockJsonSync(cwd) {
+  return readJsonSync(getPackageLockJsonPath(cwd));
+}
+async function writePackageJson(packageJson, cwd) {
+  await writeJson(getPackageJsonPath(cwd), packageJson);
+}
+function writePackageJsonSync(packageJson, cwd) {
+  writeJsonSync(getPackageJsonPath(cwd), packageJson);
+}
+async function writePackageLockJson(packageLockJson, cwd) {
+  await writeJson(getPackageLockJsonPath(cwd), packageLockJson);
+}
+function writePackageLockJsonSync(packageLockJson, cwd) {
+  writeJsonSync(getPackageLockJsonPath(cwd), packageLockJson);
+}
+export {
+  editNpmShrinkWrapJson,
+  editPackageJson,
+  editPackageJsonSync,
+  editPackageLockJson,
+  editPackageLockJsonSync,
+  getNpmShrinkWrapJsonPath,
+  getPackageJsonPath,
+  getPackageLockJsonPath,
+  readPackageJson,
+  readPackageJsonSync,
+  readPackageLockJson,
+  readPackageLockJsonSync,
+  writePackageJson,
+  writePackageJsonSync,
+  writePackageLockJson,
+  writePackageLockJsonSync
+};
+//# sourceMappingURL=data:application/json;base64,ewogICJ2ZXJzaW9uIjogMywKICAic291cmNlcyI6IFsiLi4vLi4vLi4vc3JjL25wbS50cyJdLAogICJzb3VyY2VzQ29udGVudCI6IFsiLyoqXG4gKiBAZmlsZVxuICpcbiAqIENvbnRhaW5zIHV0aWxpdHkgZnVuY3Rpb25zIGZvciBOUE0gcGFja2FnZS5qc29uLlxuICovXG5cbmltcG9ydCB0eXBlIHtcbiAgUGFja2FnZUpzb24sXG4gIFByb21pc2FibGVcbn0gZnJvbSAndHlwZS1mZXN0JztcblxuaW1wb3J0IHsgbm9ybWFsaXplT3B0aW9uYWxQcm9wZXJ0aWVzIH0gZnJvbSAnQG1uYW91bW92L3R5cGVzY3JpcHQtbGliL29iamVjdC11dGlscyc7XG5pbXBvcnQgeyBlbnN1cmVOb25OdWxsYWJsZSB9IGZyb20gJ0BtbmFvdW1vdi90eXBlc2NyaXB0LWxpYi90eXBlLWd1YXJkcyc7XG5cbmltcG9ydCB0eXBlIHtcbiAgRWRpdEpzb25QYXJhbXMsXG4gIEVkaXRKc29uU3luY1BhcmFtc1xufSBmcm9tICcuL2pzb24udHMnO1xuaW1wb3J0IHR5cGUgeyBSZXNvbHZlUGF0aEZyb21Sb290UGFyYW1zIH0gZnJvbSAnLi9yb290LnRzJztcblxuaW1wb3J0IHtcbiAgZWRpdEpzb24sXG4gIGVkaXRKc29uU3luYyxcbiAgcmVhZEpzb24sXG4gIHJlYWRKc29uU3luYyxcbiAgd3JpdGVKc29uLFxuICB3cml0ZUpzb25TeW5jXG59IGZyb20gJy4vanNvbi50cyc7XG5pbXBvcnQgeyBSZXBvUGF0aHMgfSBmcm9tICcuL3JlcG8tcGF0aHMudHMnO1xuaW1wb3J0IHsgcmVzb2x2ZVBhdGhGcm9tUm9vdCB9IGZyb20gJy4vcm9vdC50cyc7XG5cbi8qKlxuICogT3B0aW9ucyBmb3Ige0BsaW5rIGVkaXROcG1TaHJpbmtXcmFwSnNvbn0uXG4gKi9cbmV4cG9ydCB0eXBlIEVkaXROcG1TaHJpbmtXcmFwSnNvbk9wdGlvbnMgPSBFZGl0UGFja2FnZUpzb25PcHRpb25zO1xuXG4vKipcbiAqIE9wdGlvbnMgZm9yIHtAbGluayBlZGl0UGFja2FnZUpzb259LlxuICovXG5leHBvcnQgaW50ZXJmYWNlIEVkaXRQYWNrYWdlSnNvbk9wdGlvbnMge1xuICAvKipcbiAgICogQSBjdXJyZW50IHdvcmtpbmcgZm9sZGVyIHdoZXJlIGBwYWNrYWdlLmpzb25gIGlzIGxvY2F0ZWQuXG4gICAqL1xuICByZWFkb25seSBjd2Q/OiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIElmIGB0cnVlYCwgc2tpcHMgZWRpdGluZyBpZiB0aGUgZmlsZSBkb2VzIG5vdCBleGlzdC5cbiAgICpcbiAgICogQGRlZmF1bHQgYGZhbHNlYFxuICAgKi9cbiAgcmVhZG9ubHkgc2hvdWxkU2tpcElmTWlzc2luZz86IGJvb2xlYW47XG59XG5cbi8qKlxuICogT3B0aW9ucyBmb3Ige0BsaW5rIGVkaXRQYWNrYWdlSnNvblN5bmN9LlxuICovXG5leHBvcnQgdHlwZSBFZGl0UGFja2FnZUpzb25TeW5jT3B0aW9ucyA9IEVkaXRQYWNrYWdlSnNvbk9wdGlvbnM7XG5cbi8qKlxuICogT3B0aW9ucyBmb3Ige0BsaW5rIGVkaXRQYWNrYWdlTG9ja0pzb259LlxuICovXG5leHBvcnQgdHlwZSBFZGl0UGFja2FnZUxvY2tKc29uT3B0aW9ucyA9IEVkaXRQYWNrYWdlSnNvbk9wdGlvbnM7XG5cbi8qKlxuICogT3B0aW9ucyBmb3Ige0BsaW5rIGVkaXRQYWNrYWdlTG9ja0pzb25TeW5jfS5cbiAqL1xuZXhwb3J0IHR5cGUgRWRpdFBhY2thZ2VMb2NrSnNvblN5bmNPcHRpb25zID0gRWRpdFBhY2thZ2VKc29uT3B0aW9ucztcblxuLyoqXG4gKiBBIHR5cGUgb2YgdGhlIGBwYWNrYWdlLmpzb25gIGZpbGUuXG4gKi9cblxuLyoqXG4gKiBBIHR5cGUgb2YgdGhlIGBwYWNrYWdlLWxvY2suanNvbmAgZmlsZS5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBQYWNrYWdlTG9ja0pzb24gZXh0ZW5kcyBQYXJ0aWFsPFBhY2thZ2VKc29uPiB7XG4gIC8qKlxuICAgKiBQYWNrYWdlcyBpbiB0aGUgYHBhY2thZ2UtbG9jay5qc29uYCBmaWxlLlxuICAgKi9cbiAgcGFja2FnZXM/OiBSZWNvcmQ8c3RyaW5nLCBQYWNrYWdlSnNvbj47XG59XG5cbi8qKlxuICogUmVhZHMsIGVkaXRzLCBhbmQgd3JpdGVzIGJhY2sgdGhlIGBwYWNrYWdlLWxvY2suanNvbmAgZmlsZSB1c2luZyB0aGUgcHJvdmlkZWQgZWRpdCBmdW5jdGlvbi5cbiAqXG4gKiBAcGFyYW0gZWRpdEZ1bmN0aW9uIC0gVGhlIGZ1bmN0aW9uIHRvIGVkaXQgdGhlIHBhcnNlZCBgUGFja2FnZUpzb25gIG9iamVjdC5cbiAqIEBwYXJhbSBvcHRpb25zIC0gQWRkaXRpb25hbCBvcHRpb25zIGZvciBlZGl0aW5nLlxuICogQHJldHVybnMgQSB7QGxpbmsgUHJvbWlzZX0gdGhhdCByZXNvbHZlcyB3aGVuIHRoZSBmaWxlIGhhcyBiZWVuIGVkaXRlZCBhbmQgd3JpdHRlbi5cbiAqL1xuZXhwb3J0IGFzeW5jIGZ1bmN0aW9uIGVkaXROcG1TaHJpbmtXcmFwSnNvbihcbiAgZWRpdEZ1bmN0aW9uOiAocGFja2FnZUxvY2tKc29uOiBQYWNrYWdlTG9ja0pzb24pID0+IFByb21pc2FibGU8dm9pZD4sXG4gIG9wdGlvbnM6IEVkaXROcG1TaHJpbmtXcmFwSnNvbk9wdGlvbnMgPSB7fVxuKTogUHJvbWlzZTx2b2lkPiB7XG4gIGNvbnN0IHtcbiAgICBjd2QsXG4gICAgc2hvdWxkU2tpcElmTWlzc2luZ1xuICB9ID0gb3B0aW9ucztcbiAgYXdhaXQgZWRpdEpzb248UGFja2FnZUpzb24+KG5vcm1hbGl6ZU9wdGlvbmFsUHJvcGVydGllczxFZGl0SnNvblBhcmFtczxQYWNrYWdlSnNvbj4+KHsgZWRpdEZ1bmN0aW9uLCBwYXRoOiBnZXROcG1TaHJpbmtXcmFwSnNvblBhdGgoY3dkKSwgc2hvdWxkU2tpcElmTWlzc2luZyB9KSk7XG59XG5cbi8qKlxuICogUmVhZHMsIGVkaXRzLCBhbmQgd3JpdGVzIGJhY2sgdGhlIGBwYWNrYWdlLmpzb25gIGZpbGUgdXNpbmcgdGhlIHByb3ZpZGVkIGVkaXQgZnVuY3Rpb24uXG4gKlxuICogQHBhcmFtIGVkaXRGdW5jdGlvbiAtIFRoZSBmdW5jdGlvbiB0byBlZGl0IHRoZSBwYXJzZWQgYFBhY2thZ2VKc29uYCBvYmplY3QuXG4gKiBAcGFyYW0gb3B0aW9ucyAtIEFkZGl0aW9uYWwgb3B0aW9ucyBmb3IgZWRpdGluZy5cbiAqIEByZXR1cm5zIEEge0BsaW5rIFByb21pc2V9IHRoYXQgcmVzb2x2ZXMgd2hlbiB0aGUgZmlsZSBoYXMgYmVlbiBlZGl0ZWQgYW5kIHdyaXR0ZW4uXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBlZGl0UGFja2FnZUpzb24oXG4gIGVkaXRGdW5jdGlvbjogKHBhY2thZ2VKc29uOiBQYWNrYWdlSnNvbikgPT4gUHJvbWlzYWJsZTx2b2lkPixcbiAgb3B0aW9uczogRWRpdFBhY2thZ2VKc29uT3B0aW9ucyA9IHt9XG4pOiBQcm9taXNlPHZvaWQ+IHtcbiAgY29uc3Qge1xuICAgIGN3ZCxcbiAgICBzaG91bGRTa2lwSWZNaXNzaW5nXG4gIH0gPSBvcHRpb25zO1xuICBhd2FpdCBlZGl0SnNvbjxQYWNrYWdlSnNvbj4obm9ybWFsaXplT3B0aW9uYWxQcm9wZXJ0aWVzPEVkaXRKc29uUGFyYW1zPFBhY2thZ2VKc29uPj4oeyBlZGl0RnVuY3Rpb24sIHBhdGg6IGdldFBhY2thZ2VKc29uUGF0aChjd2QpLCBzaG91bGRTa2lwSWZNaXNzaW5nIH0pKTtcbn1cblxuLyoqXG4gKiBSZWFkcywgZWRpdHMsIGFuZCB3cml0ZXMgYmFjayB0aGUgYHBhY2thZ2UuanNvbmAgZmlsZSB1c2luZyB0aGUgcHJvdmlkZWQgZWRpdCBmdW5jdGlvbi5cbiAqXG4gKiBAcGFyYW0gZWRpdEZ1bmN0aW9uIC0gVGhlIGZ1bmN0aW9uIHRvIGVkaXQgdGhlIHBhcnNlZCBgUGFja2FnZUpzb25gIG9iamVjdC5cbiAqIEBwYXJhbSBvcHRpb25zIC0gQWRkaXRpb25hbCBvcHRpb25zIGZvciBlZGl0aW5nLlxuICovXG5leHBvcnQgZnVuY3Rpb24gZWRpdFBhY2thZ2VKc29uU3luYyhcbiAgZWRpdEZ1bmN0aW9uOiAocGFja2FnZUpzb246IFBhY2thZ2VKc29uKSA9PiB2b2lkLFxuICBvcHRpb25zOiBFZGl0UGFja2FnZUpzb25TeW5jT3B0aW9ucyA9IHt9XG4pOiB2b2lkIHtcbiAgY29uc3Qge1xuICAgIGN3ZCxcbiAgICBzaG91bGRTa2lwSWZNaXNzaW5nXG4gIH0gPSBvcHRpb25zO1xuICBlZGl0SnNvblN5bmM8UGFja2FnZUpzb24+KG5vcm1hbGl6ZU9wdGlvbmFsUHJvcGVydGllczxFZGl0SnNvblN5bmNQYXJhbXM8UGFja2FnZUpzb24+Pih7IGVkaXRGdW5jdGlvbiwgcGF0aDogZ2V0UGFja2FnZUpzb25QYXRoKGN3ZCksIHNob3VsZFNraXBJZk1pc3NpbmcgfSkpO1xufVxuXG4vKipcbiAqIFJlYWRzLCBlZGl0cywgYW5kIHdyaXRlcyBiYWNrIHRoZSBgcGFja2FnZS1sb2NrLmpzb25gIGZpbGUgdXNpbmcgdGhlIHByb3ZpZGVkIGVkaXQgZnVuY3Rpb24uXG4gKlxuICogQHBhcmFtIGVkaXRGdW5jdGlvbiAtIFRoZSBmdW5jdGlvbiB0byBlZGl0IHRoZSBwYXJzZWQgYFBhY2thZ2VKc29uYCBvYmplY3QuXG4gKiBAcGFyYW0gb3B0aW9ucyAtIEFkZGl0aW9uYWwgb3B0aW9ucyBmb3IgZWRpdGluZy5cbiAqIEByZXR1cm5zIEEge0BsaW5rIFByb21pc2V9IHRoYXQgcmVzb2x2ZXMgd2hlbiB0aGUgZmlsZSBoYXMgYmVlbiBlZGl0ZWQgYW5kIHdyaXR0ZW4uXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBlZGl0UGFja2FnZUxvY2tKc29uKFxuICBlZGl0RnVuY3Rpb246IChwYWNrYWdlTG9ja0pzb246IFBhY2thZ2VMb2NrSnNvbikgPT4gUHJvbWlzYWJsZTx2b2lkPixcbiAgb3B0aW9uczogRWRpdFBhY2thZ2VMb2NrSnNvbk9wdGlvbnMgPSB7fVxuKTogUHJvbWlzZTx2b2lkPiB7XG4gIGNvbnN0IHtcbiAgICBjd2QsXG4gICAgc2hvdWxkU2tpcElmTWlzc2luZ1xuICB9ID0gb3B0aW9ucztcbiAgYXdhaXQgZWRpdEpzb248UGFja2FnZUpzb24+KG5vcm1hbGl6ZU9wdGlvbmFsUHJvcGVydGllczxFZGl0SnNvblBhcmFtczxQYWNrYWdlSnNvbj4+KHsgZWRpdEZ1bmN0aW9uLCBwYXRoOiBnZXRQYWNrYWdlTG9ja0pzb25QYXRoKGN3ZCksIHNob3VsZFNraXBJZk1pc3NpbmcgfSkpO1xufVxuXG4vKipcbiAqIFJlYWRzLCBlZGl0cywgYW5kIHdyaXRlcyBiYWNrIHRoZSBgcGFja2FnZS1sb2NrLmpzb25gIGZpbGUgdXNpbmcgdGhlIHByb3ZpZGVkIGVkaXQgZnVuY3Rpb24uXG4gKlxuICogQHBhcmFtIGVkaXRGdW5jdGlvbiAtIFRoZSBmdW5jdGlvbiB0byBlZGl0IHRoZSBwYXJzZWQgYFBhY2thZ2VMb2NrSnNvbmAgb2JqZWN0LlxuICogQHBhcmFtIG9wdGlvbnMgLSBBZGRpdGlvbmFsIG9wdGlvbnMgZm9yIGVkaXRpbmcuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiBlZGl0UGFja2FnZUxvY2tKc29uU3luYyhcbiAgZWRpdEZ1bmN0aW9uOiAocGFja2FnZUxvY2tKc29uOiBQYWNrYWdlTG9ja0pzb24pID0+IHZvaWQsXG4gIG9wdGlvbnM6IEVkaXRQYWNrYWdlTG9ja0pzb25TeW5jT3B0aW9ucyA9IHt9XG4pOiB2b2lkIHtcbiAgY29uc3Qge1xuICAgIGN3ZCxcbiAgICBzaG91bGRTa2lwSWZNaXNzaW5nXG4gIH0gPSBvcHRpb25zO1xuICBlZGl0SnNvblN5bmM8UGFja2FnZUxvY2tKc29uPihub3JtYWxpemVPcHRpb25hbFByb3BlcnRpZXM8RWRpdEpzb25TeW5jUGFyYW1zPFBhY2thZ2VMb2NrSnNvbj4+KHsgZWRpdEZ1bmN0aW9uLCBwYXRoOiBnZXRQYWNrYWdlTG9ja0pzb25QYXRoKGN3ZCksIHNob3VsZFNraXBJZk1pc3NpbmcgfSkpO1xufVxuXG4vKipcbiAqIFJlc29sdmVzIHRoZSBwYXRoIHRvIHRoZSBgbnBtLXNocmlua3dyYXAuanNvbmAgZmlsZSBpbiB0aGUgc3BlY2lmaWVkIGZvbGRlciBvciBpbiB0aGUgcm9vdCBpZiBubyBmb2xkZXIgaXMgc3BlY2lmaWVkLlxuICpcbiAqIEBwYXJhbSBjd2QgLSBUaGUgY3VycmVudCB3b3JraW5nIGZvbGRlciB3aGVyZSBgbnBtLXNocmlua3dyYXAuanNvbmAgaXMgbG9jYXRlZC5cbiAqIEByZXR1cm5zIFRoZSByZXNvbHZlZCBwYXRoIHRvIHRoZSBgbnBtLXNocmlua3dyYXAuanNvbmAgZmlsZS5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGdldE5wbVNocmlua1dyYXBKc29uUGF0aChjd2Q/OiBzdHJpbmcpOiBzdHJpbmcge1xuICByZXR1cm4gZW5zdXJlTm9uTnVsbGFibGUoXG4gICAgcmVzb2x2ZVBhdGhGcm9tUm9vdChub3JtYWxpemVPcHRpb25hbFByb3BlcnRpZXM8UmVzb2x2ZVBhdGhGcm9tUm9vdFBhcmFtcz4oeyBjd2QsIHBhdGg6IFJlcG9QYXRocy5OcG1TaHJpbmt3cmFwSnNvbiB9KSksXG4gICAgJ0NvdWxkIG5vdCBkZXRlcm1pbmUgdGhlIG5wbS1zaHJpbmt3cmFwLmpzb24gcGF0aCdcbiAgKTtcbn1cblxuLyoqXG4gKiBSZXNvbHZlcyB0aGUgcGF0aCB0byB0aGUgYHBhY2thZ2UuanNvbmAgZmlsZSBpbiB0aGUgc3BlY2lmaWVkIGZvbGRlciBvciBpbiB0aGUgcm9vdCBpZiBubyBmb2xkZXIgaXMgc3BlY2lmaWVkLlxuICpcbiAqIEBwYXJhbSBjd2QgLSBUaGUgY3VycmVudCB3b3JraW5nIGZvbGRlciB3aGVyZSBgcGFja2FnZS5qc29uYCBpcyBsb2NhdGVkLlxuICogQHJldHVybnMgVGhlIHJlc29sdmVkIHBhdGggdG8gdGhlIGBwYWNrYWdlLmpzb25gIGZpbGUuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiBnZXRQYWNrYWdlSnNvblBhdGgoY3dkPzogc3RyaW5nKTogc3RyaW5nIHtcbiAgcmV0dXJuIGVuc3VyZU5vbk51bGxhYmxlKFxuICAgIHJlc29sdmVQYXRoRnJvbVJvb3Qobm9ybWFsaXplT3B0aW9uYWxQcm9wZXJ0aWVzPFJlc29sdmVQYXRoRnJvbVJvb3RQYXJhbXM+KHsgY3dkLCBwYXRoOiBSZXBvUGF0aHMuUGFja2FnZUpzb24gfSkpLFxuICAgICdDb3VsZCBub3QgZGV0ZXJtaW5lIHRoZSBwYWNrYWdlLmpzb24gcGF0aCdcbiAgKTtcbn1cblxuLyoqXG4gKiBSZXNvbHZlcyB0aGUgcGF0aCB0byB0aGUgYHBhY2thZ2UtbG9jay5qc29uYCBmaWxlIGluIHRoZSBzcGVjaWZpZWQgZm9sZGVyIG9yIGluIHRoZSByb290IGlmIG5vIGZvbGRlciBpcyBzcGVjaWZpZWQuXG4gKlxuICogQHBhcmFtIGN3ZCAtIFRoZSBjdXJyZW50IHdvcmtpbmcgZm9sZGVyIHdoZXJlIGBwYWNrYWdlLWxvY2suanNvbmAgaXMgbG9jYXRlZC5cbiAqIEByZXR1cm5zIFRoZSByZXNvbHZlZCBwYXRoIHRvIHRoZSBgcGFja2FnZS1sb2NrLmpzb25gIGZpbGUuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiBnZXRQYWNrYWdlTG9ja0pzb25QYXRoKGN3ZD86IHN0cmluZyk6IHN0cmluZyB7XG4gIHJldHVybiBlbnN1cmVOb25OdWxsYWJsZShcbiAgICByZXNvbHZlUGF0aEZyb21Sb290KG5vcm1hbGl6ZU9wdGlvbmFsUHJvcGVydGllczxSZXNvbHZlUGF0aEZyb21Sb290UGFyYW1zPih7IGN3ZCwgcGF0aDogUmVwb1BhdGhzLlBhY2thZ2VMb2NrSnNvbiB9KSksXG4gICAgJ0NvdWxkIG5vdCBkZXRlcm1pbmUgdGhlIHBhY2thZ2UtbG9jay5qc29uIHBhdGgnXG4gICk7XG59XG5cbi8qKlxuICogUmVhZHMgdGhlIGBwYWNrYWdlLmpzb25gIGZpbGUgZnJvbSB0aGUgc3BlY2lmaWVkIGZvbGRlciBvciBmcm9tIHRoZSByb290IGlmIG5vIGZvbGRlciBpcyBzcGVjaWZpZWQuXG4gKlxuICogQHBhcmFtIGN3ZCAtIFRoZSBjdXJyZW50IHdvcmtpbmcgZm9sZGVyIHdoZXJlIGBwYWNrYWdlLmpzb25gIGlzIGxvY2F0ZWQuXG4gKiBAcmV0dXJucyBBIHtAbGluayBQcm9taXNlfSB0aGF0IHJlc29sdmVzIHdpdGggdGhlIHBhcnNlZCBgUGFja2FnZUpzb25gIG9iamVjdC5cbiAqL1xuZXhwb3J0IGFzeW5jIGZ1bmN0aW9uIHJlYWRQYWNrYWdlSnNvbihjd2Q/OiBzdHJpbmcpOiBQcm9taXNlPFBhY2thZ2VKc29uPiB7XG4gIHJldHVybiBhd2FpdCByZWFkSnNvbjxQYWNrYWdlSnNvbj4oZ2V0UGFja2FnZUpzb25QYXRoKGN3ZCkpO1xufVxuXG4vKipcbiAqIFJlYWRzIHRoZSBgcGFja2FnZS5qc29uYCBmaWxlIGZyb20gdGhlIHNwZWNpZmllZCBmb2xkZXIgb3IgZnJvbSB0aGUgcm9vdCBpZiBubyBmb2xkZXIgaXMgc3BlY2lmaWVkLlxuICpcbiAqIEBwYXJhbSBjd2QgLSBUaGUgY3VycmVudCB3b3JraW5nIGZvbGRlciB3aGVyZSBgcGFja2FnZS5qc29uYCBpcyBsb2NhdGVkLlxuICogQHJldHVybnMgVGhlIHBhcnNlZCBgUGFja2FnZUpzb25gIG9iamVjdC5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIHJlYWRQYWNrYWdlSnNvblN5bmMoY3dkPzogc3RyaW5nKTogUGFja2FnZUpzb24ge1xuICByZXR1cm4gcmVhZEpzb25TeW5jPFBhY2thZ2VKc29uPihnZXRQYWNrYWdlSnNvblBhdGgoY3dkKSk7XG59XG5cbi8qKlxuICogUmVhZHMgdGhlIGBwYWNrYWdlLWxvY2suanNvbmAgZmlsZSBmcm9tIHRoZSBzcGVjaWZpZWQgZm9sZGVyIG9yIGZyb20gdGhlIHJvb3QgaWYgbm8gZm9sZGVyIGlzIHNwZWNpZmllZC5cbiAqXG4gKiBAcGFyYW0gY3dkIC0gVGhlIGN1cnJlbnQgd29ya2luZyBmb2xkZXIgd2hlcmUgYHBhY2thZ2UtbG9jay5qc29uYCBpcyBsb2NhdGVkLlxuICogQHJldHVybnMgQSB7QGxpbmsgUHJvbWlzZX0gdGhhdCByZXNvbHZlcyB3aXRoIHRoZSBwYXJzZWQgYFBhY2thZ2VKc29uYCBvYmplY3QuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiByZWFkUGFja2FnZUxvY2tKc29uKGN3ZD86IHN0cmluZyk6IFByb21pc2U8UGFja2FnZUxvY2tKc29uPiB7XG4gIHJldHVybiBhd2FpdCByZWFkSnNvbjxQYWNrYWdlTG9ja0pzb24+KGdldFBhY2thZ2VMb2NrSnNvblBhdGgoY3dkKSk7XG59XG5cbi8qKlxuICogUmVhZHMgdGhlIGBwYWNrYWdlLWxvY2suanNvbmAgZmlsZSBmcm9tIHRoZSBzcGVjaWZpZWQgZm9sZGVyIG9yIGZyb20gdGhlIHJvb3QgaWYgbm8gZm9sZGVyIGlzIHNwZWNpZmllZC5cbiAqXG4gKiBAcGFyYW0gY3dkIC0gVGhlIGN1cnJlbnQgd29ya2luZyBmb2xkZXIgd2hlcmUgYHBhY2thZ2UtbG9jay5qc29uYCBpcyBsb2NhdGVkLlxuICogQHJldHVybnMgVGhlIHBhcnNlZCBgUGFja2FnZUxvY2tKc29uYCBvYmplY3QuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiByZWFkUGFja2FnZUxvY2tKc29uU3luYyhjd2Q/OiBzdHJpbmcpOiBQYWNrYWdlTG9ja0pzb24ge1xuICByZXR1cm4gcmVhZEpzb25TeW5jPFBhY2thZ2VMb2NrSnNvbj4oZ2V0UGFja2FnZUxvY2tKc29uUGF0aChjd2QpKTtcbn1cblxuLyoqXG4gKiBXcml0ZXMgdGhlIHByb3ZpZGVkIGBQYWNrYWdlSnNvbmAgb2JqZWN0IHRvIHRoZSBgcGFja2FnZS5qc29uYCBmaWxlIGluIHRoZSBzcGVjaWZpZWQgZm9sZGVyIG9yIGluIHRoZSByb290LlxuICpcbiAqIEBwYXJhbSBwYWNrYWdlSnNvbiAtIFRoZSBgUGFja2FnZUpzb25gIG9iamVjdCB0byB3cml0ZS5cbiAqIEBwYXJhbSBjd2QgLSBUaGUgY3VycmVudCB3b3JraW5nIGZvbGRlciB3aGVyZSBgcGFja2FnZS5qc29uYCBpcyBsb2NhdGVkLlxuICogQHJldHVybnMgQSB7QGxpbmsgUHJvbWlzZX0gdGhhdCByZXNvbHZlcyB3aGVuIHRoZSBmaWxlIGhhcyBiZWVuIHdyaXR0ZW4uXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiB3cml0ZVBhY2thZ2VKc29uKHBhY2thZ2VKc29uOiBQYWNrYWdlSnNvbiwgY3dkPzogc3RyaW5nKTogUHJvbWlzZTx2b2lkPiB7XG4gIGF3YWl0IHdyaXRlSnNvbihnZXRQYWNrYWdlSnNvblBhdGgoY3dkKSwgcGFja2FnZUpzb24pO1xufVxuXG4vKipcbiAqIFdyaXRlcyB0aGUgcHJvdmlkZWQgYFBhY2thZ2VKc29uYCBvYmplY3QgdG8gdGhlIGBwYWNrYWdlLmpzb25gIGZpbGUgaW4gdGhlIHNwZWNpZmllZCBmb2xkZXIgb3IgaW4gdGhlIHJvb3QuXG4gKlxuICogQHBhcmFtIHBhY2thZ2VKc29uIC0gVGhlIGBQYWNrYWdlSnNvbmAgb2JqZWN0IHRvIHdyaXRlLlxuICogQHBhcmFtIGN3ZCAtIFRoZSBjdXJyZW50IHdvcmtpbmcgZm9sZGVyIHdoZXJlIGBwYWNrYWdlLmpzb25gIGlzIGxvY2F0ZWQuXG4gKi9cbmV4cG9ydCBmdW5jdGlvbiB3cml0ZVBhY2thZ2VKc29uU3luYyhwYWNrYWdlSnNvbjogUGFja2FnZUpzb24sIGN3ZD86IHN0cmluZyk6IHZvaWQge1xuICB3cml0ZUpzb25TeW5jKGdldFBhY2thZ2VKc29uUGF0aChjd2QpLCBwYWNrYWdlSnNvbik7XG59XG5cbi8qKlxuICogV3JpdGVzIHRoZSBwcm92aWRlZCBgUGFja2FnZUpzb25gIG9iamVjdCB0byB0aGUgYHBhY2thZ2UtbG9jay5qc29uYCBmaWxlIGluIHRoZSBzcGVjaWZpZWQgZm9sZGVyIG9yIGluIHRoZSByb290LlxuICpcbiAqIEBwYXJhbSBwYWNrYWdlTG9ja0pzb24gLSBUaGUgYFBhY2thZ2VMb2NrSnNvbmAgb2JqZWN0IHRvIHdyaXRlLlxuICogQHBhcmFtIGN3ZCAtIFRoZSBjdXJyZW50IHdvcmtpbmcgZm9sZGVyIHdoZXJlIGBwYWNrYWdlLWxvY2suanNvbmAgaXMgbG9jYXRlZC5cbiAqIEByZXR1cm5zIEEge0BsaW5rIFByb21pc2V9IHRoYXQgcmVzb2x2ZXMgd2hlbiB0aGUgZmlsZSBoYXMgYmVlbiB3cml0dGVuLlxuICovXG5leHBvcnQgYXN5bmMgZnVuY3Rpb24gd3JpdGVQYWNrYWdlTG9ja0pzb24ocGFja2FnZUxvY2tKc29uOiBQYWNrYWdlTG9ja0pzb24sIGN3ZD86IHN0cmluZyk6IFByb21pc2U8dm9pZD4ge1xuICBhd2FpdCB3cml0ZUpzb24oZ2V0UGFja2FnZUxvY2tKc29uUGF0aChjd2QpLCBwYWNrYWdlTG9ja0pzb24pO1xufVxuXG4vKipcbiAqIFdyaXRlcyB0aGUgcHJvdmlkZWQgYFBhY2thZ2VMb2NrSnNvbmAgb2JqZWN0IHRvIHRoZSBgcGFja2FnZS1sb2NrLmpzb25gIGZpbGUgaW4gdGhlIHNwZWNpZmllZCBmb2xkZXIgb3IgaW4gdGhlIHJvb3QuXG4gKlxuICogQHBhcmFtIHBhY2thZ2VMb2NrSnNvbiAtIFRoZSBgUGFja2FnZUxvY2tKc29uYCBvYmplY3QgdG8gd3JpdGUuXG4gKiBAcGFyYW0gY3dkIC0gVGhlIGN1cnJlbnQgd29ya2luZyBmb2xkZXIgd2hlcmUgYHBhY2thZ2UtbG9jay5qc29uYCBpcyBsb2NhdGVkLlxuICovXG5leHBvcnQgZnVuY3Rpb24gd3JpdGVQYWNrYWdlTG9ja0pzb25TeW5jKHBhY2thZ2VMb2NrSnNvbjogUGFja2FnZUxvY2tKc29uLCBjd2Q/OiBzdHJpbmcpOiB2b2lkIHtcbiAgd3JpdGVKc29uU3luYyhnZXRQYWNrYWdlTG9ja0pzb25QYXRoKGN3ZCksIHBhY2thZ2VMb2NrSnNvbik7XG59XG5cbi8vIFR5cGVTY3JpcHQncyBkZWNsYXJhdGlvbiBlbWl0IGFkZHMgYHdpdGggeyAncmVzb2x1dGlvbi1tb2RlJzogJ2ltcG9ydCcgfWAgdG8gaW1wb3J0IGRlY2xhcmF0aW9ucyBvbmx5LlxuLy8gQSByZS1leHBvcnQtZnJvbSB3b3VsZCB0aHVzIHJlc29sdmUgRVNNLW9ubHkgYHR5cGUtZmVzdGAgdW5kZXIgYHJlcXVpcmVgIGluIHRoZSBgLmQuY3RzYCBidWlsZCAoVFMxNDc5KS5cbi8vIFJlLWV4cG9ydGluZyB0aGUgYmluZGluZyBpbXBvcnRlZCBhYm92ZSBrZWVwcyB0aGF0IHJlc29sdXRpb24gbW9kZSBhdHRhY2hlZC5cbi8vIGVzbGludC1kaXNhYmxlLW5leHQtbGluZSB1bmljb3JuL3ByZWZlci1leHBvcnQtZnJvbSAtLSBgZXhwb3J0XHUyMDI2ZnJvbWAgcmUtaW50cm9kdWNlcyBUUzE0NzksIHNlZSBhYm92ZS5cbmV4cG9ydCB0eXBlIHsgUGFja2FnZUpzb24gfTtcbiJdLAogICJtYXBwaW5ncyI6ICI7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBV0EsU0FBUyxtQ0FBbUM7QUFDNUMsU0FBUyx5QkFBeUI7QUFRbEM7QUFBQSxFQUNFO0FBQUEsRUFDQTtBQUFBLEVBQ0E7QUFBQSxFQUNBO0FBQUEsRUFDQTtBQUFBLEVBQ0E7QUFBQSxPQUNLO0FBQ1AsU0FBUyxpQkFBaUI7QUFDMUIsU0FBUywyQkFBMkI7QUE0RHBDLGVBQXNCLHNCQUNwQixjQUNBLFVBQXdDLENBQUMsR0FDMUI7QUFDZixRQUFNO0FBQUEsSUFDSjtBQUFBLElBQ0E7QUFBQSxFQUNGLElBQUk7QUFDSixRQUFNLFNBQXNCLDRCQUF5RCxFQUFFLGNBQWMsTUFBTSx5QkFBeUIsR0FBRyxHQUFHLG9CQUFvQixDQUFDLENBQUM7QUFDbEs7QUFTQSxlQUFzQixnQkFDcEIsY0FDQSxVQUFrQyxDQUFDLEdBQ3BCO0FBQ2YsUUFBTTtBQUFBLElBQ0o7QUFBQSxJQUNBO0FBQUEsRUFDRixJQUFJO0FBQ0osUUFBTSxTQUFzQiw0QkFBeUQsRUFBRSxjQUFjLE1BQU0sbUJBQW1CLEdBQUcsR0FBRyxvQkFBb0IsQ0FBQyxDQUFDO0FBQzVKO0FBUU8sU0FBUyxvQkFDZCxjQUNBLFVBQXNDLENBQUMsR0FDakM7QUFDTixRQUFNO0FBQUEsSUFDSjtBQUFBLElBQ0E7QUFBQSxFQUNGLElBQUk7QUFDSixlQUEwQiw0QkFBNkQsRUFBRSxjQUFjLE1BQU0sbUJBQW1CLEdBQUcsR0FBRyxvQkFBb0IsQ0FBQyxDQUFDO0FBQzlKO0FBU0EsZUFBc0Isb0JBQ3BCLGNBQ0EsVUFBc0MsQ0FBQyxHQUN4QjtBQUNmLFFBQU07QUFBQSxJQUNKO0FBQUEsSUFDQTtBQUFBLEVBQ0YsSUFBSTtBQUNKLFFBQU0sU0FBc0IsNEJBQXlELEVBQUUsY0FBYyxNQUFNLHVCQUF1QixHQUFHLEdBQUcsb0JBQW9CLENBQUMsQ0FBQztBQUNoSztBQVFPLFNBQVMsd0JBQ2QsY0FDQSxVQUEwQyxDQUFDLEdBQ3JDO0FBQ04sUUFBTTtBQUFBLElBQ0o7QUFBQSxJQUNBO0FBQUEsRUFDRixJQUFJO0FBQ0osZUFBOEIsNEJBQWlFLEVBQUUsY0FBYyxNQUFNLHVCQUF1QixHQUFHLEdBQUcsb0JBQW9CLENBQUMsQ0FBQztBQUMxSztBQVFPLFNBQVMseUJBQXlCLEtBQXNCO0FBQzdELFNBQU87QUFBQSxJQUNMLG9CQUFvQiw0QkFBdUQsRUFBRSxLQUFLLE1BQU0sVUFBVSxrQkFBa0IsQ0FBQyxDQUFDO0FBQUEsSUFDdEg7QUFBQSxFQUNGO0FBQ0Y7QUFRTyxTQUFTLG1CQUFtQixLQUFzQjtBQUN2RCxTQUFPO0FBQUEsSUFDTCxvQkFBb0IsNEJBQXVELEVBQUUsS0FBSyxNQUFNLFVBQVUsWUFBWSxDQUFDLENBQUM7QUFBQSxJQUNoSDtBQUFBLEVBQ0Y7QUFDRjtBQVFPLFNBQVMsdUJBQXVCLEtBQXNCO0FBQzNELFNBQU87QUFBQSxJQUNMLG9CQUFvQiw0QkFBdUQsRUFBRSxLQUFLLE1BQU0sVUFBVSxnQkFBZ0IsQ0FBQyxDQUFDO0FBQUEsSUFDcEg7QUFBQSxFQUNGO0FBQ0Y7QUFRQSxlQUFzQixnQkFBZ0IsS0FBb0M7QUFDeEUsU0FBTyxNQUFNLFNBQXNCLG1CQUFtQixHQUFHLENBQUM7QUFDNUQ7QUFRTyxTQUFTLG9CQUFvQixLQUEyQjtBQUM3RCxTQUFPLGFBQTBCLG1CQUFtQixHQUFHLENBQUM7QUFDMUQ7QUFRQSxlQUFzQixvQkFBb0IsS0FBd0M7QUFDaEYsU0FBTyxNQUFNLFNBQTBCLHVCQUF1QixHQUFHLENBQUM7QUFDcEU7QUFRTyxTQUFTLHdCQUF3QixLQUErQjtBQUNyRSxTQUFPLGFBQThCLHVCQUF1QixHQUFHLENBQUM7QUFDbEU7QUFTQSxlQUFzQixpQkFBaUIsYUFBMEIsS0FBNkI7QUFDNUYsUUFBTSxVQUFVLG1CQUFtQixHQUFHLEdBQUcsV0FBVztBQUN0RDtBQVFPLFNBQVMscUJBQXFCLGFBQTBCLEtBQW9CO0FBQ2pGLGdCQUFjLG1CQUFtQixHQUFHLEdBQUcsV0FBVztBQUNwRDtBQVNBLGVBQXNCLHFCQUFxQixpQkFBa0MsS0FBNkI7QUFDeEcsUUFBTSxVQUFVLHVCQUF1QixHQUFHLEdBQUcsZUFBZTtBQUM5RDtBQVFPLFNBQVMseUJBQXlCLGlCQUFrQyxLQUFvQjtBQUM3RixnQkFBYyx1QkFBdUIsR0FBRyxHQUFHLGVBQWU7QUFDNUQ7IiwKICAibmFtZXMiOiBbXQp9Cg==

package/dist/lib/esm/package-lock-integrity.d.mts

@@ -0,0 +1,38 @@
+/// <reference path="./library-references.d.mts" />
+/**
+ * @file
+ *
+ * Refuses a `package-lock.json` whose installed entries have lost their `resolved` or `integrity` field.
+ *
+ * You get such a lock by deleting `package-lock.json` while `node_modules` is still installed and then
+ * running `npm install`. npm records every package it reuses from `node_modules` with its version only.
+ * One measured lock went from 7 such entries to 1064 of 1234 in a single regeneration. **npm never fills
+ * the two fields back in afterwards**: a clean install into an empty directory does not, and neither does
+ * `npm install --package-lock-only`. `npm ci` skips integrity verification for those packages, so the
+ * defect is permanent and every other check stays green.
+ *
+ * The check reads the JSON and nothing else. It makes no network call and finishes in well under a second,
+ * which is why `gate()` runs it before anything else.
+ */
+import type { PackageLockJson } from './npm.mjs';
+/**
+ * Throws when the project's `package-lock.json` has an installed entry without `resolved` or `integrity`.
+ * A project with no `package-lock.json`, such as one on another package manager, passes.
+ *
+ * @param cwd - The folder to resolve the project root from. Defaults to the current one.
+ * @returns A {@link Promise} that resolves when the lock is complete.
+ */
+export declare function assertPackageLockIntegrity(cwd?: string): Promise<void>;
+/**
+ * Finds the `packages` entries of a lockfile that have no `resolved` field, or that have a registry
+ * `resolved` field and no `integrity` field.
+ *
+ * Some entries never have these fields in a healthy lock, so they are skipped: the root (`''`), a `link`,
+ * a workspace source folder (its key has no `node_modules/` segment), and a bundled dependency (`inBundle`),
+ * which comes inside its parent's tarball. `integrity` is only required when `resolved` is a registry URL,
+ * because npm records no integrity for a git dependency.
+ *
+ * @param packageLockJson - The parsed `package-lock.json`.
+ * @returns The keys of the offending entries, in lockfile order.
+ */
+export declare function findPackageLockEntriesMissingIntegrity(packageLockJson: PackageLockJson): string[];

package/dist/lib/esm/package-lock-integrity.mjs

@@ -0,0 +1,99 @@
+/*
+THIS IS A GENERATED/BUNDLED FILE BY ESBUILD
+if you want to view the source, please visit the github repository of this plugin
+*/
+
+(function () {
+function ensureDisposeSymbols(symbolConstructor = Symbol) {
+  symbolConstructor.asyncDispose ??= symbolConstructor.for('Symbol.asyncDispose');
+  symbolConstructor.dispose ??= symbolConstructor.for('Symbol.dispose');
+}
+
+function ensureBrowserProcess() {
+  const browserProcess = {
+    browser: true,
+    cwd() {
+      return '/';
+    },
+    env: {},
+    platform: 'android'
+  };
+
+  const existingProcess = globalThis.process;
+
+  if (!existingProcess) {
+    globalThis.process = browserProcess;
+    return;
+  }
+
+  if (existingProcess.versions?.node) {
+    return;
+  }
+
+  const existingProcessRecord = existingProcess;
+
+  for (const [key, value] of Object.entries(browserProcess)) {
+    existingProcessRecord[key] ??= value;
+  }
+
+  existingProcessRecord['browser'] = true;
+}
+
+(function initEsm() {
+  ensureDisposeSymbols();
+  ensureBrowserProcess();
+})();
+})();
+
+import { existsSync } from "node:fs";
+import {
+  getPackageLockJsonPath,
+  readPackageLockJson
+} from "./npm.mjs";
+const MAX_REPORTED_KEYS = 5;
+const NODE_MODULES_SEGMENT = "node_modules/";
+const REGISTRY_RESOLVED_REG_EXP = /^https?:\/\//;
+async function assertPackageLockIntegrity(cwd) {
+  const packageLockJsonPath = getPackageLockJsonPath(cwd);
+  if (!existsSync(packageLockJsonPath)) {
+    return;
+  }
+  const keys = findPackageLockEntriesMissingIntegrity(await readPackageLockJson(cwd));
+  if (keys.length === 0) {
+    return;
+  }
+  const shownKeys = keys.slice(0, MAX_REPORTED_KEYS).map((key) => `  ${key}`);
+  const remainingCount = keys.length - shownKeys.length;
+  if (remainingCount > 0) {
+    shownKeys.push(`  ... and ${String(remainingCount)} more`);
+  }
+  throw new Error(
+    [
+      `${packageLockJsonPath}: ${String(keys.length)} installed package(s) have no \`resolved\` or no \`integrity\`, so \`npm ci\` cannot verify them:`,
+      ...shownKeys,
+      "npm never adds these fields back by itself, and regenerating the lock would change versions. Fill each entry from the registry",
+      "metadata for the version already locked: GET https://registry.npmjs.org/<name, with / written as %2f>/<version>, and copy",
+      "`dist.tarball` into `resolved` and `dist.integrity` into `integrity`. The name is the entry's `name` field, or else the text",
+      "after the key's last `node_modules/`. Then check that `npm install --package-lock-only` leaves the file byte-identical.",
+      "To skip this check for one run, set PACKAGE_LOCK_INTEGRITY=0."
+    ].join("\n")
+  );
+}
+function findPackageLockEntriesMissingIntegrity(packageLockJson) {
+  const keys = [];
+  for (const [key, value] of Object.entries(packageLockJson.packages ?? {})) {
+    const entry = value;
+    if (key === "" || !key.includes(NODE_MODULES_SEGMENT) || entry.link || entry.inBundle) {
+      continue;
+    }
+    if (entry.resolved === void 0 || entry.integrity === void 0 && REGISTRY_RESOLVED_REG_EXP.test(entry.resolved)) {
+      keys.push(key);
+    }
+  }
+  return keys;
+}
+export {
+  assertPackageLockIntegrity,
+  findPackageLockEntriesMissingIntegrity
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/esm/package-manager.d.mts

@@ -0,0 +1,93 @@
+/// <reference path="./library-references.d.mts" />
+/**
+ * @file
+ *
+ * Resolves locally-installed tool binaries and package-script runners without assuming `npm`.
+ *
+ * Delegating to `npx` silently assumes an npm-installed tree. On Windows that assumption is fatal under
+ * `bun`: `bun install` writes `node_modules/.bin/<tool>.exe`, not the `<tool>.cmd` that npm's `npx` looks
+ * for, so `npx` misses the local install entirely and downloads the tool from the registry instead — which
+ * for `tsc` is the well-known decoy package, not TypeScript. Resolving the shim from `node_modules/.bin`
+ * ourselves sidesteps the whole shim-format question, because every package manager writes one there.
+ */
+/**
+ * A package manager that can own a project's dependency tree.
+ */
+export declare enum PackageManager {
+    /**
+     * The `bun` package manager.
+     */
+    Bun = "bun",
+    /**
+     * The `npm` package manager.
+     */
+    Npm = "npm",
+    /**
+     * The `pnpm` package manager.
+     */
+    Pnpm = "pnpm",
+    /**
+     * The `yarn` package manager.
+     */
+    Yarn = "yarn"
+}
+/**
+ * Parameters for {@link resolveToolCommand}.
+ */
+export interface ResolveToolCommandParams {
+    /**
+     * The current working folder to resolve from.
+     */
+    readonly cwd?: string;
+    /**
+     * The name of the locally-installed tool, as it appears in `node_modules/.bin`.
+     */
+    readonly tool: string;
+}
+/**
+ * Determines which package manager owns the project's dependency tree.
+ *
+ * Every signal is collected before any of them is believed, because a repo carrying two lockfiles used to
+ * resolve to whichever sat earlier in a fixed list — silently reassigning every package script and every
+ * tool invocation to a manager that never installed the tree.
+ *
+ * The order is:
+ *
+ * 1. The `packageManager` field of `package.json`. It is a deliberate declaration by the repo's author
+ *    rather than an artifact left behind by whatever ran last, so it outranks every lockfile — and it is
+ *    the only signal that helps at all before the first install, when no lockfile exists yet.
+ * 2. The sole lockfile, when exactly one manager claims the tree.
+ * 3. Among several lockfiles, the manager that launched us (`npm_config_user_agent`), when it owns one of
+ *    them — a live signal beats a file that may have been abandoned mid-migration. Otherwise the
+ *    documented fallback order in {@link LOCKFILES} decides. Note this is deliberately NOT "the most
+ *    recently modified lockfile": a stray lockfile is typically the newest file, so mtime picks precisely
+ *    the wrong one.
+ * 4. `npm_config_user_agent` on its own, when there is no lockfile.
+ * 5. {@link PackageManager.Npm}.
+ *
+ * Whenever more than one manager claims the tree, the disagreement is reported once per project through
+ * {@link warnAboutSeveralClaimants} — the resolution stays deterministic, but it stops being silent.
+ *
+ * @param cwd - The current working folder to resolve from.
+ * @returns The detected package manager, or {@link PackageManager.Npm} when nothing indicates otherwise.
+ */
+export declare function getPackageManager(cwd?: string): PackageManager;
+/**
+ * Builds the command parts that run a package script through the manager that owns the tree.
+ *
+ * @param cwd - The current working folder to resolve from.
+ * @returns The command parts, e.g. `['bun', 'run']`. The script name is appended by the caller.
+ */
+export declare function getPackageManagerRunCommand(cwd?: string): string[];
+/**
+ * Builds the command parts that run a locally-installed tool, with the tool itself already included.
+ *
+ * Prefers the shim in the nearest `node_modules/.bin`, walking up through ancestor folders so a hoisted
+ * workspace install is still found. Falls back to the owning manager's exec form when no shim resolves —
+ * which is both the previous behavior and the only thing that works under yarn's Plug'n'Play, where
+ * `node_modules/.bin` does not exist at all.
+ *
+ * @param params - The parameters for the resolution.
+ * @returns The command parts, e.g. `['/project/node_modules/.bin/tsc']` or `['bun', 'x', 'tsc']`.
+ */
+export declare function resolveToolCommand(params: ResolveToolCommandParams): string[];