@pnpm/lockfile.verification 1.0.0

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2016 Rico Sta. Cruz and other contributors
+Copyright (c) 2016-2024 Zoltan Kochan and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,15 @@
+# @pnpm/lockfile.verification
+
+> Checks a lockfile
+
+[![npm version](https://img.shields.io/npm/v/@pnpm/lockfile.verification.svg)](https://www.npmjs.com/package/@pnpm/lockfile.verification)
+
+## Installation
+
+```sh
+pnpm add @pnpm/lockfile.verification
+```
+
+## License
+
+MIT

package/lib/allCatalogsAreUpToDate.d.ts

@@ -0,0 +1,3 @@
+import { type CatalogSnapshots } from '@pnpm/lockfile.types';
+import { type Catalogs } from '@pnpm/catalogs.types';
+export declare function allCatalogsAreUpToDate(catalogsConfig: Catalogs, snapshot: CatalogSnapshots | undefined): boolean;

package/lib/allCatalogsAreUpToDate.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allCatalogsAreUpToDate = void 0;
+function allCatalogsAreUpToDate(catalogsConfig, snapshot) {
+    return Object.entries(snapshot ?? {})
+        .every(([catalogName, catalog]) => Object.entries(catalog ?? {})
+        .every(([alias, entry]) => entry.specifier === catalogsConfig[catalogName]?.[alias]));
+}
+exports.allCatalogsAreUpToDate = allCatalogsAreUpToDate;
+//# sourceMappingURL=allCatalogsAreUpToDate.js.map

package/lib/allCatalogsAreUpToDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allCatalogsAreUpToDate.js","sourceRoot":"","sources":["../src/allCatalogsAreUpToDate.ts"],"names":[],"mappings":";;;AAGA,SAAgB,sBAAsB,CACpC,cAAwB,EACxB,QAAsC;IAEtC,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC3F,CAAC;AAPD,wDAOC"}

package/lib/allProjectsAreUpToDate.d.ts

@@ -0,0 +1,16 @@
+import { type Catalogs } from '@pnpm/catalogs.types';
+import { type ProjectOptions } from '@pnpm/get-context';
+import { type Lockfile } from '@pnpm/lockfile.types';
+import { type WorkspacePackages } from '@pnpm/resolver-base';
+import { type ProjectId } from '@pnpm/types';
+export declare function allProjectsAreUpToDate(projects: Array<Pick<ProjectOptions, 'manifest' | 'rootDir'> & {
+    id: ProjectId;
+}>, opts: {
+    catalogs: Catalogs;
+    autoInstallPeers: boolean;
+    excludeLinksFromLockfile: boolean;
+    linkWorkspacePackages: boolean;
+    wantedLockfile: Lockfile;
+    workspacePackages: WorkspacePackages;
+    lockfileDir: string;
+}): Promise<boolean>;

package/lib/allProjectsAreUpToDate.js

@@ -0,0 +1,162 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allProjectsAreUpToDate = void 0;
+const path_1 = __importDefault(require("path"));
+const lockfile_utils_1 = require("@pnpm/lockfile.utils");
+const read_package_json_1 = require("@pnpm/read-package-json");
+const dependency_path_1 = require("@pnpm/dependency-path");
+const types_1 = require("@pnpm/types");
+const p_every_1 = __importDefault(require("p-every"));
+const any_1 = __importDefault(require("ramda/src/any"));
+const semver_1 = __importDefault(require("semver"));
+const version_selector_type_1 = __importDefault(require("version-selector-type"));
+const allCatalogsAreUpToDate_1 = require("./allCatalogsAreUpToDate");
+const satisfiesPackageManifest_1 = require("./satisfiesPackageManifest");
+async function allProjectsAreUpToDate(projects, opts) {
+    // Projects may declare dependencies using catalog protocol specifiers. If the
+    // catalog config definitions are edited by users, projects using them are out
+    // of date.
+    if (!(0, allCatalogsAreUpToDate_1.allCatalogsAreUpToDate)(opts.catalogs, opts.wantedLockfile.catalogs)) {
+        return false;
+    }
+    const manifestsByDir = opts.workspacePackages ? getWorkspacePackagesByDirectory(opts.workspacePackages) : {};
+    const _satisfiesPackageManifest = satisfiesPackageManifest_1.satisfiesPackageManifest.bind(null, {
+        autoInstallPeers: opts.autoInstallPeers,
+        excludeLinksFromLockfile: opts.excludeLinksFromLockfile,
+    });
+    const _linkedPackagesAreUpToDate = linkedPackagesAreUpToDate.bind(null, {
+        linkWorkspacePackages: opts.linkWorkspacePackages,
+        manifestsByDir,
+        workspacePackages: opts.workspacePackages,
+        lockfilePackages: opts.wantedLockfile.packages,
+        lockfileDir: opts.lockfileDir,
+    });
+    return (0, p_every_1.default)(projects, (project) => {
+        const importer = opts.wantedLockfile.importers[project.id];
+        return !hasLocalTarballDepsInRoot(importer) &&
+            _satisfiesPackageManifest(importer, project.manifest).satisfies &&
+            _linkedPackagesAreUpToDate({
+                dir: project.rootDir,
+                manifest: project.manifest,
+                snapshot: importer,
+            });
+    });
+}
+exports.allProjectsAreUpToDate = allProjectsAreUpToDate;
+function getWorkspacePackagesByDirectory(workspacePackages) {
+    const workspacePackagesByDirectory = {};
+    if (workspacePackages) {
+        for (const pkgVersions of workspacePackages.values()) {
+            for (const { rootDir, manifest } of pkgVersions.values()) {
+                workspacePackagesByDirectory[rootDir] = manifest;
+            }
+        }
+    }
+    return workspacePackagesByDirectory;
+}
+async function linkedPackagesAreUpToDate({ linkWorkspacePackages, manifestsByDir, workspacePackages, lockfilePackages, lockfileDir, }, project) {
+    return (0, p_every_1.default)(types_1.DEPENDENCIES_FIELDS, (depField) => {
+        const lockfileDeps = project.snapshot[depField];
+        const manifestDeps = project.manifest[depField];
+        if ((lockfileDeps == null) || (manifestDeps == null))
+            return true;
+        const depNames = Object.keys(lockfileDeps);
+        return (0, p_every_1.default)(depNames, async (depName) => {
+            const currentSpec = manifestDeps[depName];
+            if (!currentSpec)
+                return true;
+            const lockfileRef = lockfileDeps[depName];
+            if ((0, lockfile_utils_1.refIsLocalDirectory)(project.snapshot.specifiers[depName])) {
+                const depPath = (0, dependency_path_1.refToRelative)(lockfileRef, depName);
+                return depPath != null && isLocalFileDepUpdated(lockfileDir, lockfilePackages?.[depPath]);
+            }
+            const isLinked = lockfileRef.startsWith('link:');
+            if (isLinked &&
+                (currentSpec.startsWith('link:') ||
+                    currentSpec.startsWith('file:') ||
+                    currentSpec.startsWith('workspace:.'))) {
+                return true;
+            }
+            // https://github.com/pnpm/pnpm/issues/6592
+            // if the dependency is linked and the specified version type is tag, we consider it to be up-to-date to skip full resolution.
+            if (isLinked && (0, version_selector_type_1.default)(currentSpec)?.type === 'tag') {
+                return true;
+            }
+            const linkedDir = isLinked
+                ? path_1.default.join(project.dir, lockfileRef.slice(5))
+                : workspacePackages?.get(depName)?.get(lockfileRef)?.rootDir;
+            if (!linkedDir)
+                return true;
+            if (!linkWorkspacePackages && !currentSpec.startsWith('workspace:')) {
+                // we found a linked dir, but we don't want to use it, because it's not specified as a
+                // workspace:x.x.x dependency
+                return true;
+            }
+            const linkedPkg = manifestsByDir[linkedDir] ?? await (0, read_package_json_1.safeReadPackageJsonFromDir)(linkedDir);
+            const availableRange = getVersionRange(currentSpec);
+            // This should pass the same options to semver as @pnpm/npm-resolver
+            const localPackageSatisfiesRange = availableRange === '*' || availableRange === '^' || availableRange === '~' ||
+                linkedPkg && semver_1.default.satisfies(linkedPkg.version, availableRange, { loose: true });
+            if (isLinked !== localPackageSatisfiesRange)
+                return false;
+            return true;
+        });
+    });
+}
+async function isLocalFileDepUpdated(lockfileDir, pkgSnapshot) {
+    if (!pkgSnapshot)
+        return false;
+    const localDepDir = path_1.default.join(lockfileDir, pkgSnapshot.resolution.directory);
+    const manifest = await (0, read_package_json_1.safeReadPackageJsonFromDir)(localDepDir);
+    if (!manifest)
+        return false;
+    for (const depField of types_1.DEPENDENCIES_OR_PEER_FIELDS) {
+        if (depField === 'devDependencies')
+            continue;
+        const manifestDeps = manifest[depField] ?? {};
+        const lockfileDeps = pkgSnapshot[depField] ?? {};
+        // Lock file has more dependencies than the current manifest, e.g. some dependencies are removed.
+        if (Object.keys(lockfileDeps).some(depName => !manifestDeps[depName])) {
+            return false;
+        }
+        for (const depName of Object.keys(manifestDeps)) {
+            // If a dependency does not exist in the lock file, e.g. a new dependency is added to the current manifest.
+            // We need to do full resolution again.
+            if (!lockfileDeps[depName]) {
+                return false;
+            }
+            const currentSpec = manifestDeps[depName];
+            // We do not care about the link dependencies of local dependency.
+            if (currentSpec.startsWith('file:') || currentSpec.startsWith('link:') || currentSpec.startsWith('workspace:'))
+                continue;
+            if (semver_1.default.satisfies(lockfileDeps[depName], getVersionRange(currentSpec), { loose: true })) {
+                continue;
+            }
+            else {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+function getVersionRange(spec) {
+    if (spec.startsWith('workspace:'))
+        return spec.slice(10);
+    if (spec.startsWith('npm:')) {
+        spec = spec.slice(4);
+        const index = spec.indexOf('@', 1);
+        if (index === -1)
+            return '*';
+        return spec.slice(index + 1) || '*';
+    }
+    return spec;
+}
+function hasLocalTarballDepsInRoot(importer) {
+    return (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.dependencies ?? {})) ||
+        (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.devDependencies ?? {})) ||
+        (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.optionalDependencies ?? {}));
+}
+//# sourceMappingURL=allProjectsAreUpToDate.js.map

package/lib/allProjectsAreUpToDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allProjectsAreUpToDate.js","sourceRoot":"","sources":["../src/allProjectsAreUpToDate.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAuB;AASvB,yDAA6E;AAC7E,+DAAoE;AACpE,2DAAqD;AAErD,uCAMoB;AACpB,sDAA4B;AAC5B,wDAA+B;AAC/B,oDAA2B;AAC3B,kFAA0D;AAC1D,qEAAiE;AACjE,yEAAqE;AAE9D,KAAK,UAAU,sBAAsB,CAC1C,QAAiF,EACjF,IAQC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,WAAW;IACX,IAAI,CAAC,IAAA,+CAAsB,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5G,MAAM,yBAAyB,GAAG,mDAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;QACpE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;KACxD,CAAC,CAAA;IACF,MAAM,0BAA0B,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE;QACtE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;QAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,OAAO,IAAA,iBAAM,EAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YACzC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS;YAC/D,0BAA0B,CAAC;gBACzB,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAzCD,wDAyCC;AAED,SAAS,+BAA+B,CAAE,iBAAoC;IAC5E,MAAM,4BAA4B,GAAuC,EAAE,CAAA;IAC3E,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,MAAM,WAAW,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;YACrD,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzD,4BAA4B,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,4BAA4B,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,EACE,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,GAOZ,EACD,OAIC;IAED,OAAO,IAAA,iBAAM,EACX,2BAAmB,EACnB,CAAC,QAAQ,EAAE,EAAE;QACX,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1C,OAAO,IAAA,iBAAM,EACX,QAAQ,EACR,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;YACzC,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAA;YAC7B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;YACzC,IAAI,IAAA,oCAAmB,EAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,OAAO,GAAG,IAAA,+BAAa,EAAC,WAAW,EAAE,OAAO,CAAC,CAAA;gBACnD,OAAO,OAAO,IAAI,IAAI,IAAI,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAChD,IACE,QAAQ;gBACR,CACE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC/B,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC/B,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CACtC,EACD,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,2CAA2C;YAC3C,8HAA8H;YAC9H,IAAI,QAAQ,IAAI,IAAA,+BAAsB,EAAC,WAAW,CAAC,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ;gBACxB,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9C,CAAC,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;YAC9D,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YAC3B,IAAI,CAAC,qBAAqB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpE,sFAAsF;gBACtF,6BAA6B;gBAC7B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,MAAM,IAAA,8CAA0B,EAAC,SAAS,CAAC,CAAA;YAC1F,MAAM,cAAc,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;YACnD,oEAAoE;YACpE,MAAM,0BAA0B,GAAG,cAAc,KAAK,GAAG,IAAI,cAAc,KAAK,GAAG,IAAI,cAAc,KAAK,GAAG;gBAC3G,SAAS,IAAI,gBAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnF,IAAI,QAAQ,KAAK,0BAA0B;gBAAE,OAAO,KAAK,CAAA;YACzD,OAAO,IAAI,CAAA;QACb,CAAC,CACF,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAE,WAAmB,EAAE,WAAwC;IACjG,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC9B,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAG,WAAW,CAAC,UAAkC,CAAC,SAAS,CAAC,CAAA;IACrG,MAAM,QAAQ,GAAG,MAAM,IAAA,8CAA0B,EAAC,WAAW,CAAC,CAAA;IAC9D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,KAAK,MAAM,QAAQ,IAAI,mCAA2B,EAAE,CAAC;QACnD,IAAI,QAAQ,KAAK,iBAAiB;YAAE,SAAQ;QAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QAEhD,iGAAiG;QACjG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAA;QACd,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,2GAA2G;YAC3G,uCAAuC;YACvC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;YACzC,kEAAkE;YAClE,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAQ;YACxH,IAAI,gBAAM,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3F,SAAQ;YACV,CAAC;iBAAM,CAAC;gBACN,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAE,IAAY;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAA;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,CAAA;IACrC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,yBAAyB,CAAE,QAAyB;IAC3D,OAAO,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACvE,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QACrE,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;AAC9E,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,2 @@
+export { allProjectsAreUpToDate } from './allProjectsAreUpToDate';
+export { satisfiesPackageManifest } from './satisfiesPackageManifest';

package/lib/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.satisfiesPackageManifest = exports.allProjectsAreUpToDate = void 0;
+var allProjectsAreUpToDate_1 = require("./allProjectsAreUpToDate");
+Object.defineProperty(exports, "allProjectsAreUpToDate", { enumerable: true, get: function () { return allProjectsAreUpToDate_1.allProjectsAreUpToDate; } });
+var satisfiesPackageManifest_1 = require("./satisfiesPackageManifest");
+Object.defineProperty(exports, "satisfiesPackageManifest", { enumerable: true, get: function () { return satisfiesPackageManifest_1.satisfiesPackageManifest; } });
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mEAAiE;AAAxD,gIAAA,sBAAsB,OAAA;AAC/B,uEAAqE;AAA5D,oIAAA,wBAAwB,OAAA"}

package/lib/satisfiesPackageManifest.d.ts

@@ -0,0 +1,9 @@
+import { type ProjectSnapshot } from '@pnpm/lockfile.types';
+import { type ProjectManifest } from '@pnpm/types';
+export declare function satisfiesPackageManifest(opts: {
+    autoInstallPeers?: boolean;
+    excludeLinksFromLockfile?: boolean;
+}, importer: ProjectSnapshot | undefined, pkg: ProjectManifest): {
+    satisfies: boolean;
+    detailedReason?: string;
+};

package/lib/satisfiesPackageManifest.js

@@ -0,0 +1,96 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.satisfiesPackageManifest = void 0;
+const types_1 = require("@pnpm/types");
+const equals_1 = __importDefault(require("ramda/src/equals"));
+const pickBy_1 = __importDefault(require("ramda/src/pickBy"));
+const omit_1 = __importDefault(require("ramda/src/omit"));
+function satisfiesPackageManifest(opts, importer, pkg) {
+    if (!importer)
+        return { satisfies: false, detailedReason: 'no importer' };
+    let existingDeps = { ...pkg.devDependencies, ...pkg.dependencies, ...pkg.optionalDependencies };
+    if (opts?.autoInstallPeers) {
+        pkg = {
+            ...pkg,
+            dependencies: {
+                ...pkg.peerDependencies && (0, omit_1.default)(Object.keys(existingDeps), pkg.peerDependencies),
+                ...pkg.dependencies,
+            },
+        };
+        existingDeps = {
+            ...pkg.peerDependencies,
+            ...existingDeps,
+        };
+    }
+    const pickNonLinkedDeps = (0, pickBy_1.default)((spec) => !spec.startsWith('link:'));
+    let specs = importer.specifiers;
+    if (opts?.excludeLinksFromLockfile) {
+        existingDeps = pickNonLinkedDeps(existingDeps);
+        specs = pickNonLinkedDeps(specs);
+    }
+    if (!(0, equals_1.default)(existingDeps, specs)) {
+        return {
+            satisfies: false,
+            detailedReason: `specifiers in the lockfile (${JSON.stringify(specs)}) don't match specs in package.json (${JSON.stringify(existingDeps)})`,
+        };
+    }
+    if (importer.publishDirectory !== pkg.publishConfig?.directory) {
+        return {
+            satisfies: false,
+            detailedReason: `"publishDirectory" in the lockfile (${importer.publishDirectory ?? 'undefined'}) doesn't match "publishConfig.directory" in package.json (${pkg.publishConfig?.directory ?? 'undefined'})`,
+        };
+    }
+    if (!(0, equals_1.default)(pkg.dependenciesMeta ?? {}, importer.dependenciesMeta ?? {})) {
+        return {
+            satisfies: false,
+            detailedReason: `importer dependencies meta (${JSON.stringify(importer.dependenciesMeta)}) doesn't match package manifest dependencies meta (${JSON.stringify(pkg.dependenciesMeta)})`,
+        };
+    }
+    for (const depField of types_1.DEPENDENCIES_FIELDS) {
+        const importerDeps = importer[depField] ?? {};
+        let pkgDeps = pkg[depField] ?? {};
+        if (opts?.excludeLinksFromLockfile) {
+            pkgDeps = pickNonLinkedDeps(pkgDeps);
+        }
+        let pkgDepNames;
+        switch (depField) {
+            case 'optionalDependencies':
+                pkgDepNames = Object.keys(pkgDeps);
+                break;
+            case 'devDependencies':
+                pkgDepNames = Object.keys(pkgDeps)
+                    .filter((depName) => !pkg.optionalDependencies?.[depName] && !pkg.dependencies?.[depName]);
+                break;
+            case 'dependencies':
+                pkgDepNames = Object.keys(pkgDeps)
+                    .filter((depName) => !pkg.optionalDependencies?.[depName]);
+                break;
+            default:
+                throw new Error(`Unknown dependency type "${depField}"`);
+        }
+        if (pkgDepNames.length !== Object.keys(importerDeps).length &&
+            pkgDepNames.length !== countOfNonLinkedDeps(importerDeps)) {
+            return {
+                satisfies: false,
+                detailedReason: `"${depField}" in the lockfile (${JSON.stringify(importerDeps)}) doesn't match the same field in package.json (${JSON.stringify(pkgDeps)})`,
+            };
+        }
+        for (const depName of pkgDepNames) {
+            if (!importerDeps[depName] || importer.specifiers?.[depName] !== pkgDeps[depName]) {
+                return {
+                    satisfies: false,
+                    detailedReason: `importer ${depField}.${depName} specifier ${importer.specifiers[depName]} don't match package manifest specifier (${pkgDeps[depName]})`,
+                };
+            }
+        }
+    }
+    return { satisfies: true };
+}
+exports.satisfiesPackageManifest = satisfiesPackageManifest;
+function countOfNonLinkedDeps(lockfileDeps) {
+    return Object.values(lockfileDeps).filter((ref) => !ref.includes('link:') && !ref.includes('file:')).length;
+}
+//# sourceMappingURL=satisfiesPackageManifest.js.map

package/lib/satisfiesPackageManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"satisfiesPackageManifest.js","sourceRoot":"","sources":["../src/satisfiesPackageManifest.ts"],"names":[],"mappings":";;;;;;AACA,uCAGoB;AACpB,8DAAqC;AACrC,8DAAqC;AACrC,0DAAiC;AAEjC,SAAgB,wBAAwB,CACtC,IAGC,EACD,QAAqC,EACrC,GAAoB;IAEpB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,CAAA;IACzE,IAAI,YAAY,GAA2B,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,oBAAoB,EAAE,CAAA;IACvH,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC3B,GAAG,GAAG;YACJ,GAAG,GAAG;YACN,YAAY,EAAE;gBACZ,GAAG,GAAG,CAAC,gBAAgB,IAAI,IAAA,cAAI,EAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;gBAChF,GAAG,GAAG,CAAC,YAAY;aACpB;SACF,CAAA;QACD,YAAY,GAAG;YACb,GAAG,GAAG,CAAC,gBAAgB;YACvB,GAAG,YAAY;SAChB,CAAA;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAA,gBAAM,EAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;IACrE,IAAI,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAA;IAC/B,IAAI,IAAI,EAAE,wBAAwB,EAAE,CAAC;QACnC,YAAY,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAA;QAC9C,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,CAAC,IAAA,gBAAM,EAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;SAC5I,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;QAC/D,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,uCAAuC,QAAQ,CAAC,gBAAgB,IAAI,WAAW,8DAA8D,GAAG,CAAC,aAAa,EAAE,SAAS,IAAI,WAAW,GAAG;SAC5M,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAA,gBAAM,EAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,EAAE,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,+BAA+B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG;SACvL,CAAA;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,2BAAmB,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC7C,IAAI,OAAO,GAA2B,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QACzD,IAAI,IAAI,EAAE,wBAAwB,EAAE,CAAC;YACnC,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACtC,CAAC;QAED,IAAI,WAAsB,CAAA;QAC1B,QAAQ,QAAQ,EAAE,CAAC;YACnB,KAAK,sBAAsB;gBACzB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAClC,MAAK;YACP,KAAK,iBAAiB;gBACpB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;qBAC/B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC5F,MAAK;YACP,KAAK,cAAc;gBACjB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;qBAC/B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC5D,MAAK;YACP;gBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAkB,GAAG,CAAC,CAAA;QACpE,CAAC;QACD,IACE,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM;YACvD,WAAW,CAAC,MAAM,KAAK,oBAAoB,CAAC,YAAY,CAAC,EACzD,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,IAAI,QAAQ,sBAAsB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;aAC5J,CAAA;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClF,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,YAAY,QAAQ,IAAI,OAAO,cAAc,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,4CAA4C,OAAO,CAAC,OAAO,CAAC,GAAG;iBACzJ,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAC5B,CAAC;AAzFD,4DAyFC;AAED,SAAS,oBAAoB,CAAE,YAA2C;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AAC7G,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@pnpm/lockfile.verification",
+  "version": "1.0.0",
+  "description": "Checks a lockfile",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "files": [
+    "lib",
+    "!*.map"
+  ],
+  "engines": {
+    "node": ">=18.12"
+  },
+  "repository": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification",
+  "keywords": [
+    "pnpm9",
+    "pnpm",
+    "lockfile"
+  ],
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/pnpm/pnpm/issues"
+  },
+  "homepage": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification#readme",
+  "peerDependencies": {
+    "@pnpm/logger": "^5.0.0"
+  },
+  "dependencies": {
+    "p-every": "^2.0.0",
+    "ramda": "npm:@pnpm/ramda@0.28.1",
+    "semver": "^7.6.2",
+    "version-selector-type": "^3.0.0",
+    "@pnpm/catalogs.types": "0.1.0",
+    "@pnpm/dependency-path": "5.1.3",
+    "@pnpm/get-context": "12.0.2",
+    "@pnpm/lockfile.utils": "1.0.0",
+    "@pnpm/lockfile.types": "1.0.0",
+    "@pnpm/read-package-json": "9.0.5",
+    "@pnpm/resolver-base": "13.0.1",
+    "@pnpm/types": "11.1.0"
+  },
+  "devDependencies": {
+    "@types/ramda": "0.29.12",
+    "@types/semver": "7.5.3",
+    "@pnpm/constants": "8.0.0",
+    "@pnpm/lockfile.verification": "1.0.0",
+    "@pnpm/prepare": "0.0.99"
+  },
+  "funding": "https://opencollective.com/pnpm",
+  "exports": {
+    ".": "./lib/index.js"
+  },
+  "scripts": {
+    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
+    "_test": "jest",
+    "test": "pnpm run compile && pnpm run _test",
+    "compile": "tsc --build && pnpm run lint --fix"
+  }
+}