@vzn/vx-lockfile 0.0.596 → 0.0.598

package/README.md

@@ -41,7 +41,7 @@ A lockfile the parser cannot read **refuses the run**, naming the file, the reas
 
 ## Cost
 
-The claim, the per-project key, the memo and the `--affected` diff are core's `lockfileClaim`; this package is the parsers, and they are internal: it exports `pnpm`, `bun`, `npm`, `yarn` and `LockfileOptions`. A lockfile is parsed **once per content**: the digests are memoised under the cache dir (`lockfile-claims/<file>.json`) by the file's xxh3, so a warm run pays one read, one hash and one small JSON read — never a parse — and the read happens once per run, not per task. The digest is one hash per strongly connected component of the dependency graph (lockfiles carry cycles), children first, so a 1000-importer / 3000-package lockfile digests in ~20 ms when it does change.
+The claim, the per-project key, the memo and the `--affected` diff are core's `lockfileClaim`; this package is the parsers, and they are internal: it exports `pnpm`, `bun`, `npm`, `yarn` and `LockfileOptions`. A lockfile is parsed **once per content**: the digests are memoised under the cache dir (`lockfile-claims/<file>.json`) by the file's xxh3 and the claimant, so a warm run pays one read, one hash and one small JSON read — never a parse — and the read happens once per run, not per task. The digest is one hash per strongly connected component of the dependency graph (lockfiles carry cycles), children first, so a 1000-importer / 3000-package lockfile digests in ~20 ms when it does change.
 
 ## `--affected`
 
@@ -55,7 +55,7 @@ Declaring any of the four plugins adds `vx prune` (the `commands` seam): the wor
 vx prune <project...> [--out-dir <dir>] [--docker]
 ```
 
-The out dir (default `out/`, relative to the cwd) gets the root `package.json` with `workspaces` rewritten to the subset's dirs, `pnpm-workspace.yaml` with `packages` rewritten (every other key as written), each lockfile at the root **pruned** to what the subset installs, the install config (`.npmrc`, `.yarnrc.yml`, `.pnpmfile.cjs`, `bunfig.toml`, `.nvmrc`, `.node-version`, the patch files `patchedDependencies` names, Yarn's `yarnPath` and plugins), `vx.workspace.*`, the root `vx.config.*`, and each project directory less `node_modules`, `.git`, `.vx` and `.turbo`. A workspace package a copied vx config imports (a local plugin) comes along with its closure: the config loads before any task. A relative config import that leaves the subset is warned about. `--docker` writes `json/` — the root install files and each project's `package.json`, the cacheable install layer — and `full/`, everything:
+The out dir (default `out/`, relative to the cwd) gets the root `package.json` with `workspaces` rewritten to the subset's dirs (a glob character in a dir name bracketed, `a[1]` → `a[[]1]`, so the pattern matches that dir alone), `pnpm-workspace.yaml` with `packages` rewritten (every other key as written), each lockfile at the root **pruned** to what the subset installs, the install config (`.npmrc`, `.yarnrc.yml`, `.pnpmfile.cjs`, `bunfig.toml`, `.nvmrc`, `.node-version`, the patch files `patchedDependencies` names, Yarn's `yarnPath` and plugins), `vx.workspace.*`, the root `vx.config.*`, and each project directory less `node_modules`, `.git`, `.vx` and `.turbo`. A workspace package a copied vx config imports (a local plugin) comes along with its closure: the config loads before any task. A relative config import that leaves the subset is warned about. `--docker` writes `json/` — the root install files and each project's `package.json`, the cacheable install layer — and `full/`, everything:
 
 ```dockerfile
 COPY out/json/ .

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx-lockfile",
-  "version": "0.0.596",
+  "version": "0.0.598",
   "license": "MIT",
   "description": "Lockfile plugins for vx — pnpm(), bun(), npm(), yarn(): each keys every task on its project's own resolved dependency closure from the package manager's lockfile, so a lockfile change re-keys only the projects it reaches; --affected follows the same answer; `vx prune` cuts the workspace and the lockfile to a Docker subset.",
   "keywords": [
@@ -37,7 +37,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@vzn/vx": "^0.0.596"
+    "@vzn/vx": "^0.0.598"
   },
   "repository": {
     "type": "git",

package/src/prune.ts

@@ -195,7 +195,8 @@ export async function prune(argv: readonly string[], ctx: CommandContext): Promi
   const listed = Array.isArray(field)
     ? (field as string[])
     : ((field as { packages?: string[] } | undefined)?.packages ?? undefined)
-  const workspaces = listed?.includes('.') ? ['.', ...rels] : rels
+  const patterns = rels.map(literalGlob)
+  const workspaces = listed?.includes('.') ? ['.', ...patterns] : patterns
   if (listed !== undefined) {
     rootManifest['workspaces'] = Array.isArray(field)
       ? workspaces
@@ -237,7 +238,7 @@ export async function prune(argv: readonly string[], ctx: CommandContext): Promi
   if (await exists(workspaceYaml)) {
     written.set(
       'pnpm-workspace.yaml',
-      rewriteWorkspaceYaml(await Bun.file(workspaceYaml).text(), rels),
+      rewriteWorkspaceYaml(await Bun.file(workspaceYaml).text(), patterns),
     )
   }
   // A manifest with no `workspaces` (pnpm's) is copied byte for byte.
@@ -287,10 +288,21 @@ export async function prune(argv: readonly string[], ctx: CommandContext): Promi
   return 0
 }
 
-/** `packages:` cut to the subset's dirs; every other key as written. */
-function rewriteWorkspaceYaml(text: string, rels: readonly string[]): string {
+/**
+ * A dir as a workspace pattern that matches only itself: every package
+ * manager and vx read the list as globs, and `packages/a[1]` matched
+ * `packages/a1`, so the pruned copy had no such member. A class of one
+ * (`[[]`) is the escape bun, npm, pnpm, yarn and `Bun.Glob` all read;
+ * a backslash is not (bun found no workspace).
+ */
+function literalGlob(rel: string): string {
+  return rel.replace(/[*?[{]/g, '[$&]')
+}
+
+/** `packages:` cut to the subset's member patterns; every other key as written. */
+function rewriteWorkspaceYaml(text: string, members: readonly string[]): string {
   const lines = text.split('\n')
-  const list = ['packages:', ...rels.map((r) => `  - ${JSON.stringify(r)}`)]
+  const list = ['packages:', ...members.map((r) => `  - ${JSON.stringify(r)}`)]
   const at = lines.findIndex((l) => /^packages\s*:/.test(l))
   if (at === -1) return [...list, ...lines].join('\n')
   let end = at + 1