@rsdk/yarn.constraints 6.0.0-next.4 → 6.0.0-next.41

package/dist/runner.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDependencyModel = runDependencyModel;
+/**
+ * Dependency model runner.
+ *
+ * The runner coordinates impure work: locating the repo root, collecting facts,
+ * iterating external metadata discovery, invoking the pure engine, and applying
+ * manifest fixes when requested.
+ */
+const config_1 = require("./collectors/config");
+const external_metadata_1 = require("./collectors/external-metadata");
+const package_extensions_1 = require("./collectors/package-extensions");
+const type_providers_1 = require("./collectors/type-providers");
+const workspaces_1 = require("./collectors/workspaces");
+const package_json_1 = require("./lib/package-json");
+const engine_1 = require("./model/engine");
+const manifest_writer_1 = require("./writer/manifest-writer");
+function runDependencyModel(options = {}) {
+    const rootDir = options.rootDir ?? (0, package_json_1.findMonorepoRoot)(process.cwd());
+    if (!rootDir) {
+        throw new Error('Unable to find monorepo root');
+    }
+    const config = (0, config_1.loadConfig)(rootDir, options.constraintsPath);
+    const rules = config.rules ?? [];
+    const withDts = options.withDts === true;
+    const contexts = (0, workspaces_1.loadWorkspaces)(rootDir, withDts);
+    const packageExtensions = (0, package_extensions_1.loadPackageExtensions)(rootDir);
+    const workspaceNames = new Set(contexts.filter((ws) => !ws.isRoot).map((ws) => ws.name));
+    const typeProviderPackages = (0, type_providers_1.collectTypeProviderPackages)(rootDir, contexts[0].pkg, rules);
+    const externalPeerMetadata = new Map();
+    const externalTypeMetadata = new Map();
+    const providerIdents = (0, external_metadata_1.collectExternalProviderIdents)(contexts, workspaceNames);
+    let output = null;
+    for (let pass = 0; pass < 10; pass++) {
+        (0, external_metadata_1.collectExternalMetadata)(rootDir, packageExtensions, providerIdents, externalPeerMetadata, externalTypeMetadata);
+        output = (0, engine_1.deriveDependencyModel)({
+            workspaces: contexts,
+            externalPeerMetadata,
+            externalTypeMetadata,
+            typeProviderPackages,
+            rules,
+            ...(withDts ? { withDts: true } : {}),
+        });
+        let changed = false;
+        for (const ident of (0, external_metadata_1.collectExternalProviderIdents)(contexts, workspaceNames, output.expected)) {
+            if (providerIdents.has(ident))
+                continue;
+            providerIdents.add(ident);
+            changed = true;
+        }
+        if (!changed)
+            break;
+    }
+    if (!output) {
+        throw new Error('Unable to derive dependency model');
+    }
+    if (options.fix && output.violations.length > 0) {
+        (0, manifest_writer_1.writeFixes)(rootDir, output.expected);
+    }
+    return {
+        rootDir,
+        violations: output.violations,
+        warnings: output.warnings,
+        contexts,
+        expected: output.expected,
+        config,
+    };
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":";;AAwBA,gDA6EC;AArGD;;;;;;GAMG;AACH,gDAAiD;AACjD,sEAGwC;AACxC,wEAAwE;AACxE,gEAA0E;AAC1E,wDAAyD;AACzD,qDAAsD;AACtD,2CAAuD;AAMvD,8DAAsD;AAEtD,SAAgB,kBAAkB,CAChC,UAAkC,EAAE;IAEpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAA,+BAAgB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAA,2BAAc,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,IAAA,0CAAqB,EAAC,OAAO,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CACzD,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAA,4CAA2B,EACtD,OAAO,EACP,QAAQ,CAAC,CAAC,CAAE,CAAC,GAAG,EAChB,KAAK,CACN,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC7E,MAAM,cAAc,GAAG,IAAA,iDAA6B,EAClD,QAAQ,EACR,cAAc,CACf,CAAC;IACF,IAAI,MAAM,GAAiC,IAAI,CAAC;IAEhD,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,IAAA,2CAAuB,EACrB,OAAO,EACP,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;QAEF,MAAM,GAAG,IAAA,8BAAqB,EAAC;YAC7B,UAAU,EAAE,QAAQ;YACpB,oBAAoB;YACpB,oBAAoB;YACpB,oBAAoB;YACpB,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,KAAK,IAAI,IAAA,iDAA6B,EAC/C,QAAQ,EACR,cAAc,EACd,MAAM,CAAC,QAAQ,CAChB,EAAE,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACxC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM;IACtB,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAA,4BAAU,EAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,OAAO;QACL,OAAO;QACP,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/writer/manifest-writer.d.ts

@@ -0,0 +1,2 @@
+import type { ExpectedWorkspace } from '../model/types';
+export declare function writeFixes(rootDir: string, expectedByLocation: Map<string, ExpectedWorkspace>): void;

package/dist/writer/manifest-writer.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeFixes = writeFixes;
+/**
+ * Manifest writer.
+ *
+ * The writer is the only module that mutates package.json files. It preserves
+ * unrelated fields, rewrites dependency sections from the expected graph, and
+ * skips writes when the normalized section content is unchanged.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const types_1 = require("../model/types");
+function sortedRecord(map) {
+    return Object.fromEntries([...map.entries()].sort(([a], [b]) => a.localeCompare(b)));
+}
+function recordsEqual(actual, expected) {
+    const actualEntries = Object.entries(actual ?? {}).sort(([a], [b]) => a.localeCompare(b));
+    const expectedEntries = [...expected.entries()].sort(([a], [b]) => a.localeCompare(b));
+    return JSON.stringify(actualEntries) === JSON.stringify(expectedEntries);
+}
+function peerDependenciesMetaEqual(actual, expected) {
+    const actualEntries = Object.entries(actual ?? {}).sort(([a], [b]) => a.localeCompare(b));
+    const expectedEntries = Object.entries(expected ?? {}).sort(([a], [b]) => a.localeCompare(b));
+    return JSON.stringify(actualEntries) === JSON.stringify(expectedEntries);
+}
+function prunePeerDependenciesMeta(pkg, expectedPeerDependencies) {
+    if (pkg.peerDependenciesMeta === undefined)
+        return false;
+    const nextMeta = Object.fromEntries(Object.entries(pkg.peerDependenciesMeta)
+        .filter(([depIdent]) => expectedPeerDependencies.has(depIdent))
+        .sort(([a], [b]) => a.localeCompare(b)));
+    if (Object.keys(nextMeta).length === 0) {
+        delete pkg.peerDependenciesMeta;
+        return true;
+    }
+    if (peerDependenciesMetaEqual(pkg.peerDependenciesMeta, nextMeta)) {
+        return false;
+    }
+    pkg.peerDependenciesMeta = nextMeta;
+    return true;
+}
+function writeFixes(rootDir, expectedByLocation) {
+    for (const expected of expectedByLocation.values()) {
+        const pkg = expected.workspace.pkg;
+        let changed = false;
+        for (const section of types_1.SECTIONS) {
+            if (expected.sections[section].size === 0) {
+                if (pkg[section] !== undefined) {
+                    delete pkg[section];
+                    changed = true;
+                }
+                continue;
+            }
+            if (!recordsEqual(pkg[section], expected.sections[section])) {
+                pkg[section] = sortedRecord(expected.sections[section]);
+                changed = true;
+            }
+        }
+        changed =
+            prunePeerDependenciesMeta(pkg, expected.sections.peerDependencies) ||
+                changed;
+        if (changed) {
+            const pkgPath = node_path_1.default.join(rootDir, expected.workspace.location, 'package.json');
+            (0, node_fs_1.writeFileSync)(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
+        }
+    }
+}
+//# sourceMappingURL=manifest-writer.js.map

package/dist/writer/manifest-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-writer.js","sourceRoot":"","sources":["../../src/writer/manifest-writer.ts"],"names":[],"mappings":";;;;;AAyEA,gCAqCC;AA9GD;;;;;;GAMG;AACH,qCAAwC;AACxC,0DAA6B;AAI7B,0CAA0C;AAE1C,SAAS,YAAY,CAAC,GAAwB;IAC5C,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAA0C,EAC1C,QAA6B;IAE7B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACnE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAChE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAuD,EACvD,QAA6C;IAE7C,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACnE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACvE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,yBAAyB,CAChC,GAAgB,EAChB,wBAA6C;IAE7C,IAAI,GAAG,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;SAC9D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC,oBAAoB,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,yBAAyB,CAAC,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,oBAAoB,GAAG,QAAQ,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,UAAU,CACxB,OAAe,EACf,kBAAkD;IAElD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,OAAO,IAAI,gBAAQ,EAAE,CAAC;YAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC1C,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO;YACL,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClE,OAAO,CAAC;QAEV,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CACvB,OAAO,EACP,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAC3B,cAAc,CACf,CAAC;YAEF,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}

package/eslint.config.cjs

@@ -0,0 +1,3 @@
+const rsdkEslint = require('@rsdk/eslint-plugin');
+
+module.exports = rsdkEslint.createConfig({ tsconfigRootDir: __dirname });

package/jest.config.js

@@ -0,0 +1 @@
+module.exports = require('@rsdk/jest/jest.config');

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@rsdk/yarn.constraints",
-  "version": "6.0.0-next.4",
+  "role": "cli",
+  "version": "6.0.0-next.41",
   "description": "Useful common classes, functions and types",
   "license": "Apache License 2.0",
   "publishConfig": {
@@ -10,9 +11,12 @@
     "url": "https://github.com/R-Vision/rsdk"
   },
   "main": "dist/index.js",
+  "bin": {
+    "depdoc": "dist/bin/depdoc.js"
+  },
   "dependencies": {
-    "@sinclair/typebox": "^0.34.9",
+    "typescript": "5.7.3",
     "yaml": "^2.6.1"
   },
-  "gitHead": "f0dec6323cbe016b5efd433484d2f2d044d12fa9"
+  "gitHead": "e6e580cf9f7b89e7b236530d767db5d6429c9c6f"
 }

package/src/ansi.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared ANSI styling helpers for CLI output.
+ *
+ * Keep terminal escape codes centralized here so command/reporting modules can
+ * add restrained color without duplicating formatting details or hard-coding
+ * ANSI sequences throughout the codebase.
+ */
+const enabled =
+  process.env.NO_COLOR === undefined && process.env.FORCE_COLOR !== '0';
+
+function wrap(open: string, close: string, value: string): string {
+  return enabled ? `${open}${value}${close}` : value;
+}
+
+export const ansi = {
+  bold: (value: string): string => wrap('\u001B[1m', '\u001B[22m', value),
+  dim: (value: string): string => wrap('\u001B[2m', '\u001B[22m', value),
+  red: (value: string): string => wrap('\u001B[31m', '\u001B[39m', value),
+  green: (value: string): string => wrap('\u001B[32m', '\u001B[39m', value),
+  yellow: (value: string): string => wrap('\u001B[33m', '\u001B[39m', value),
+  cyan: (value: string): string => wrap('\u001B[36m', '\u001B[39m', value),
+  magenta: (value: string): string => wrap('\u001B[35m', '\u001B[39m', value),
+};

package/src/bin/depdoc.ts

@@ -0,0 +1,213 @@
+#!/usr/bin/env node
+/**
+ * `depdoc` command-line entrypoint.
+ *
+ * The CLI only parses commands and orchestrates high-level steps. Dependency
+ * placement decisions live in the model engine, while filesystem collection and
+ * manifest writes go through the runner.
+ */
+import { execSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+
+import { ansi } from '../ansi';
+import {
+  explainDependency,
+  formatDependencyModelResult,
+  runDependencyModel,
+} from '../dependency-model';
+
+function printUsage(): void {
+  console.error(`${ansi.bold('Usage:')}
+  ${ansi.cyan('depdoc')} check [--with-dts]
+  ${ansi.cyan('depdoc')} fix [--with-dts]
+  ${ansi.cyan('depdoc')} explain <workspace> <dependency>
+  ${ansi.cyan('depdoc')} doctor`);
+}
+
+function spawnStep(label: string, cmd: string, cwd: string): void {
+  console.error(`\n${ansi.cyan('──')} ${ansi.bold(label)}`);
+  console.error(`${ansi.dim('$')} ${ansi.cyan(cmd)}`);
+  execSync(cmd, { cwd, stdio: 'inherit' });
+}
+
+function checkPeerRequirements(cwd: string): boolean {
+  const cmd = 'yarn explain peer-requirements';
+
+  console.error(`\n${ansi.cyan('──')} ${ansi.bold('yarn peer requirements')}`);
+  console.error(`${ansi.dim('$')} ${ansi.cyan(cmd)}`);
+
+  let output: string;
+
+  try {
+    output = execSync(cmd, {
+      cwd,
+      encoding: 'utf8',
+      maxBuffer: 32 * 1024 * 1024,
+    });
+  } catch (error) {
+    const childError = error as { stdout?: string; stderr?: string };
+    if (childError.stdout) process.stderr.write(childError.stdout);
+    if (childError.stderr) process.stderr.write(childError.stderr);
+    return false;
+  }
+
+  const failedRequirements = output
+    .split(/\r?\n/)
+    .filter((line) => line.includes('✘'));
+
+  if (failedRequirements.length === 0) {
+    console.error(ansi.green('✓ peer requirements are satisfied'));
+    return true;
+  }
+
+  console.error(failedRequirements.join('\n'));
+  console.error(
+    ansi.red(`${failedRequirements.length} peer requirement(s) failed`),
+  );
+  console.error(
+    ansi.dim('Run `yarn explain peer-requirements <hash>` for details.'),
+  );
+  return false;
+}
+
+function snapshotPackageJsons(
+  result: ReturnType<typeof runDependencyModel>,
+): string {
+  return [...result.expected.keys()]
+    .sort()
+    .map((location) =>
+      readFileSync(path.join(result.rootDir, location, 'package.json'), 'utf8'),
+    )
+    .join('\0');
+}
+
+function main(): void {
+  const rawArgs = process.argv.slice(2);
+  if (rawArgs.includes('--help') || rawArgs.includes('-h')) {
+    printUsage();
+    process.exit(0);
+  }
+
+  const positional = rawArgs.filter((a) => !a.startsWith('--'));
+  const [command, firstArg, secondArg] = positional;
+  const withDts = rawArgs.includes('--with-dts');
+
+  if (!command) {
+    printUsage();
+    process.exit(1);
+  }
+
+  if (command === 'check') {
+    const result = runDependencyModel({ withDts });
+
+    console.error(formatDependencyModelResult(result));
+    process.exit(result.violations.length === 0 ? 0 : 1);
+  }
+
+  if (command === 'fix') {
+    const before = runDependencyModel({ fix: true, withDts });
+    const after = runDependencyModel({ withDts });
+    const fixed = Math.max(
+      0,
+      before.violations.length - after.violations.length,
+    );
+
+    console.error(formatDependencyModelResult(after));
+    if (fixed > 0) {
+      console.error(
+        ansi.green(`fixed ${fixed} dependency model violation(s)`),
+      );
+    }
+    process.exit(after.violations.length === 0 ? 0 : 1);
+  }
+
+  if (command === 'explain') {
+    if (!firstArg || !secondArg) {
+      printUsage();
+      process.exit(1);
+    }
+    const result = runDependencyModel();
+
+    console.log(explainDependency(result, firstArg, secondArg));
+    process.exit(0);
+  }
+
+  if (command === 'doctor') {
+    runDoctor();
+    return;
+  }
+
+  printUsage();
+  process.exit(1);
+}
+
+function runDoctor(): void {
+  console.error(`\n${ansi.cyan('──')} ${ansi.bold('depdoc fix')}`);
+  const fixResult = runDependencyModel({ fix: true });
+  const afterFix = runDependencyModel();
+  const fixed = Math.max(
+    0,
+    fixResult.violations.length - afterFix.violations.length,
+  );
+
+  console.error(formatDependencyModelResult(afterFix));
+  if (fixed > 0) console.error(ansi.green(`fixed ${fixed} violation(s)`));
+
+  const { rootDir, config } = afterFix;
+
+  spawnStep('yarn install', 'yarn install', rootDir);
+
+  if (config.doctor?.buildCmd) {
+    spawnStep('build', config.doctor.buildCmd, rootDir);
+  } else {
+    console.error(
+      `\n${ansi.cyan('──')} ${ansi.yellow('build skipped')} ${ansi.dim('(doctor.buildCmd not configured in .constraints.yml)')}`,
+    );
+  }
+
+  const beforeDtsFixSnapshot = snapshotPackageJsons(afterFix);
+
+  console.error(`\n${ansi.cyan('──')} ${ansi.bold('depdoc fix --with-dts')}`);
+  const dtsFix = runDependencyModel({ fix: true, withDts: true });
+  const afterDtsFix = runDependencyModel({ withDts: true });
+  const afterDtsFixSnapshot = snapshotPackageJsons(afterDtsFix);
+  const dtsFixed = Math.max(
+    0,
+    dtsFix.violations.length - afterDtsFix.violations.length,
+  );
+
+  console.error(formatDependencyModelResult(afterDtsFix));
+  if (dtsFixed > 0) {
+    console.error(
+      ansi.green(
+        `fixed ${dtsFixed} additional violation(s) from .d.ts surface`,
+      ),
+    );
+  }
+
+  if (beforeDtsFixSnapshot !== afterDtsFixSnapshot) {
+    spawnStep('yarn install (post-dts-fix)', 'yarn install', rootDir);
+  }
+
+  if (!checkPeerRequirements(rootDir)) process.exit(1);
+
+  if (config.doctor?.lintCmd) {
+    spawnStep('lint', config.doctor.lintCmd, rootDir);
+  }
+
+  if (config.doctor?.typecheckCmd) {
+    spawnStep('typecheck', config.doctor.typecheckCmd, rootDir);
+  }
+
+  const finalViolations = afterDtsFix.violations.length;
+
+  console.error(
+    finalViolations === 0
+      ? `\n${ansi.green('✓')} ${ansi.bold('doctor: all checks passed')}`
+      : `\n${ansi.red('✖')} ${ansi.bold(`doctor: ${finalViolations} violation(s) remain`)}`,
+  );
+  process.exit(finalViolations === 0 ? 0 : 1);
+}
+
+main();

package/src/collectors/config.ts

@@ -0,0 +1,33 @@
+/**
+ * Constraints configuration collector.
+ *
+ * This module is the only place that resolves and parses `.constraints.yml`.
+ * It returns raw model configuration; rule semantics are handled later by the
+ * pure model layer.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import yaml from 'yaml';
+
+import { assertValidDependencyModelConfig } from '../model/config-validation';
+import type { DependencyModelConfig } from '../model/types';
+
+export function loadConfig(
+  rootDir: string,
+  constraintsPath?: string,
+): DependencyModelConfig {
+  const filepath =
+    constraintsPath ??
+    process.env.RSDK_YARN_CONSTRAINTS_CFG ??
+    path.join(rootDir, '.rsdk/.constraints.yml');
+
+  if (!existsSync(filepath)) return { rules: [] };
+
+  const config = yaml.parse(
+    readFileSync(filepath, 'utf8'),
+  ) as DependencyModelConfig;
+
+  assertValidDependencyModelConfig(config);
+
+  return config;
+}

package/src/collectors/external-metadata.ts

@@ -0,0 +1,148 @@
+/**
+ * Installed external package metadata collector.
+ *
+ * Peer and bundled-type metadata are read from installed packages and Yarn
+ * packageExtensions. The engine consumes the resulting maps as facts, keeping
+ * node_modules access outside the pure model.
+ */
+import path from 'node:path';
+
+import { readPackageJson } from '../lib/package-json';
+import type {
+  ExpectedWorkspace,
+  PackageExtension,
+  WorkspaceContext,
+} from '../model/types';
+import { SECTIONS } from '../model/types';
+
+import { getMatchingPackageExtensions } from './package-extensions';
+
+const externalPeersCache = new Map<string, Map<string, string> | null>();
+
+function getExternalRequiredPeers(
+  rootDir: string,
+  packageExtensions: Map<string, PackageExtension>,
+  extIdent: string,
+): Map<string, string> | null {
+  const cacheKey = `${rootDir}:${extIdent}`;
+  if (externalPeersCache.has(cacheKey))
+    return externalPeersCache.get(cacheKey)!;
+
+  let peers: Record<string, string>;
+  let meta: Record<string, { optional?: boolean }>;
+
+  try {
+    const pkg = readPackageJson(path.join(rootDir, 'node_modules', extIdent));
+
+    peers = { ...pkg.peerDependencies };
+    meta = { ...pkg.peerDependenciesMeta };
+  } catch {
+    peers = {};
+    meta = {};
+  }
+
+  for (const extension of getMatchingPackageExtensions(
+    extIdent,
+    packageExtensions,
+  )) {
+    peers = { ...peers, ...extension.peerDependencies };
+    meta = { ...meta, ...extension.peerDependenciesMeta };
+  }
+
+  const required = new Map(
+    Object.entries(peers).filter(([ident]) => !meta[ident]?.optional),
+  );
+  const value = required.size > 0 ? required : null;
+
+  externalPeersCache.set(cacheKey, value);
+
+  return value;
+}
+
+function exportsDeclareTypes(value: unknown): boolean {
+  if (!value || typeof value !== 'object') return false;
+  if (Array.isArray(value)) return value.some(exportsDeclareTypes);
+
+  for (const [key, nested] of Object.entries(
+    value as Record<string, unknown>,
+  )) {
+    if ((key === 'types' || key === 'typings') && typeof nested === 'string') {
+      return true;
+    }
+    if (exportsDeclareTypes(nested)) return true;
+  }
+
+  return false;
+}
+
+function getExternalTypeMetadata(
+  rootDir: string,
+  extIdent: string,
+): { hasBundledTypes: boolean } {
+  try {
+    const pkg = readPackageJson(path.join(rootDir, 'node_modules', extIdent));
+
+    return {
+      hasBundledTypes:
+        typeof pkg.types === 'string' ||
+        typeof pkg.typings === 'string' ||
+        exportsDeclareTypes(pkg.exports),
+    };
+  } catch {
+    return { hasBundledTypes: false };
+  }
+}
+
+export function collectExternalProviderIdents(
+  contexts: WorkspaceContext[],
+  workspaceNames: Set<string>,
+  expectedByLocation?: Map<string, ExpectedWorkspace>,
+): Set<string> {
+  const result = new Set<string>();
+  const add = (depIdent: string, range?: string): void => {
+    if (workspaceNames.has(depIdent) || range?.startsWith('workspace:')) return;
+    result.add(depIdent);
+  };
+
+  for (const ctx of contexts) {
+    for (const section of SECTIONS) {
+      for (const [depIdent, range] of Object.entries(ctx.pkg[section] ?? {})) {
+        add(depIdent, range);
+      }
+    }
+    for (const depIdent of ctx.sourceUsage.keys()) add(depIdent);
+    for (const depIdent of ctx.dtsImports) add(depIdent);
+  }
+
+  if (expectedByLocation) {
+    for (const expected of expectedByLocation.values()) {
+      for (const section of SECTIONS) {
+        for (const [depIdent, range] of expected.sections[section]) {
+          add(depIdent, range);
+        }
+      }
+    }
+  }
+
+  return result;
+}
+
+export function collectExternalMetadata(
+  rootDir: string,
+  packageExtensions: Map<string, PackageExtension>,
+  idents: Set<string>,
+  externalPeerMetadata: Map<string, Map<string, string> | null>,
+  externalTypeMetadata: Map<string, { hasBundledTypes: boolean }>,
+): void {
+  for (const ident of idents) {
+    if (!externalPeerMetadata.has(ident)) {
+      externalPeerMetadata.set(
+        ident,
+        getExternalRequiredPeers(rootDir, packageExtensions, ident),
+      );
+    }
+    if (!externalTypeMetadata.has(ident)) {
+      externalTypeMetadata.set(ident, getExternalTypeMetadata(rootDir, ident));
+    }
+  }
+}

package/src/collectors/package-extensions.ts

@@ -0,0 +1,52 @@
+/**
+ * Yarn packageExtensions collector.
+ *
+ * Third-party peer metadata corrections are read from `.yarnrc.yml` here. The
+ * model receives these corrections as facts and does not parse Yarn config
+ * directly.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import yaml from 'yaml';
+
+import type { PackageExtension } from '../model/types';
+
+export function loadPackageExtensions(
+  rootDir: string,
+): Map<string, PackageExtension> {
+  const filepath = path.join(rootDir, '.yarnrc.yml');
+  if (!existsSync(filepath)) return new Map();
+
+  const parsed = yaml.parse(readFileSync(filepath, 'utf8')) as {
+    packageExtensions?: Record<string, PackageExtension>;
+  };
+  const result = new Map<string, PackageExtension>();
+
+  for (const [selector, extension] of Object.entries(
+    parsed.packageExtensions ?? {},
+  )) {
+    result.set(selector, extension);
+  }
+
+  return result;
+}
+
+function extensionSelectorIdent(selector: string): string {
+  const atIndex = selector.lastIndexOf('@');
+  if (atIndex <= 0) return selector;
+
+  return selector.slice(0, atIndex);
+}
+
+export function getMatchingPackageExtensions(
+  depIdent: string,
+  packageExtensions: Map<string, PackageExtension>,
+): PackageExtension[] {
+  const result: PackageExtension[] = [];
+
+  for (const [selector, extension] of packageExtensions) {
+    if (extensionSelectorIdent(selector) === depIdent) result.push(extension);
+  }
+
+  return result;
+}