@webpieces/dev-config 0.2.33 → 0.2.35

package/architecture/lib/graph-loader.js

@@ -57,7 +57,7 @@ function saveGraph(graph, workspaceRoot, graphPath = exports.DEFAULT_GRAPH_PATH)
     for (const key of sortedKeys) {
         sortedGraph[key] = graph[key];
     }
-    const content = JSON.stringify(sortedGraph, null, 2) + '\n';
+    const content = JSON.stringify(sortedGraph, null, 4) + '\n';
     fs.writeFileSync(fullPath, content, 'utf-8');
 }
 /**

package/architecture/lib/graph-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph-loader.js","sourceRoot":"","sources":["../../../../../../packages/tooling/dev-config/architecture/lib/graph-loader.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkBH,4CAgBC;AASD,8BAsBC;AAKD,0CAMC;;AA1ED,+CAAyB;AACzB,mDAA6B;AAG7B;;GAEG;AACU,QAAA,kBAAkB,GAAG,gCAAgC,CAAC;AAEnE;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC5B,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAErD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;IAChD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,SAAS,CACrB,KAAoB,EACpB,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEnC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAkB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAC3B,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC","sourcesContent":["/**\n * Graph Loader\n *\n * Handles loading and saving the blessed dependency graph file.\n * The graph is stored at architecture/dependencies.json in the workspace root.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport type { EnhancedGraph } from './graph-sorter';\n\n/**\n * Default path for the dependencies file (relative to workspace root)\n */\nexport const DEFAULT_GRAPH_PATH = 'architecture/dependencies.json';\n\n/**\n * Load the blessed graph from disk\n *\n * @param workspaceRoot - Absolute path to workspace root\n * @param graphPath - Relative path to graph file (default: .graphs/dependencies.json)\n * @returns The blessed graph, or null if file doesn't exist\n */\nexport function loadBlessedGraph(\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): EnhancedGraph | null {\n    const fullPath = path.join(workspaceRoot, graphPath);\n\n    if (!fs.existsSync(fullPath)) {\n        return null;\n    }\n\n    try {\n        const content = fs.readFileSync(fullPath, 'utf-8');\n        return JSON.parse(content) as EnhancedGraph;\n    } catch (err: unknown) {\n        throw new Error(`Failed to load graph from ${fullPath}: ${err}`);\n    }\n}\n\n/**\n * Save the graph to disk\n *\n * @param graph - The graph to save\n * @param workspaceRoot - Absolute path to workspace root\n * @param graphPath - Relative path to graph file (default: .graphs/dependencies.json)\n */\nexport function saveGraph(\n    graph: EnhancedGraph,\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): void {\n    const fullPath = path.join(workspaceRoot, graphPath);\n    const dir = path.dirname(fullPath);\n\n    // Ensure directory exists\n    if (!fs.existsSync(dir)) {\n        fs.mkdirSync(dir, { recursive: true });\n    }\n\n    // Sort keys for deterministic output\n    const sortedGraph: EnhancedGraph = {};\n    const sortedKeys = Object.keys(graph).sort();\n    for (const key of sortedKeys) {\n        sortedGraph[key] = graph[key];\n    }\n\n    const content = JSON.stringify(sortedGraph, null, 2) + '\\n';\n    fs.writeFileSync(fullPath, content, 'utf-8');\n}\n\n/**\n * Check if the graph file exists\n */\nexport function graphFileExists(\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): boolean {\n    const fullPath = path.join(workspaceRoot, graphPath);\n    return fs.existsSync(fullPath);\n}\n"]}
+{"version":3,"file":"graph-loader.js","sourceRoot":"","sources":["../../../../../../packages/tooling/dev-config/architecture/lib/graph-loader.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkBH,4CAgBC;AASD,8BAsBC;AAKD,0CAMC;;AA1ED,+CAAyB;AACzB,mDAA6B;AAG7B;;GAEG;AACU,QAAA,kBAAkB,GAAG,gCAAgC,CAAC;AAEnE;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC5B,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAErD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;IAChD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,SAAS,CACrB,KAAoB,EACpB,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEnC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAkB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAC3B,aAAqB,EACrB,YAAoB,0BAAkB;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC","sourcesContent":["/**\n * Graph Loader\n *\n * Handles loading and saving the blessed dependency graph file.\n * The graph is stored at architecture/dependencies.json in the workspace root.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport type { EnhancedGraph } from './graph-sorter';\n\n/**\n * Default path for the dependencies file (relative to workspace root)\n */\nexport const DEFAULT_GRAPH_PATH = 'architecture/dependencies.json';\n\n/**\n * Load the blessed graph from disk\n *\n * @param workspaceRoot - Absolute path to workspace root\n * @param graphPath - Relative path to graph file (default: .graphs/dependencies.json)\n * @returns The blessed graph, or null if file doesn't exist\n */\nexport function loadBlessedGraph(\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): EnhancedGraph | null {\n    const fullPath = path.join(workspaceRoot, graphPath);\n\n    if (!fs.existsSync(fullPath)) {\n        return null;\n    }\n\n    try {\n        const content = fs.readFileSync(fullPath, 'utf-8');\n        return JSON.parse(content) as EnhancedGraph;\n    } catch (err: unknown) {\n        throw new Error(`Failed to load graph from ${fullPath}: ${err}`);\n    }\n}\n\n/**\n * Save the graph to disk\n *\n * @param graph - The graph to save\n * @param workspaceRoot - Absolute path to workspace root\n * @param graphPath - Relative path to graph file (default: .graphs/dependencies.json)\n */\nexport function saveGraph(\n    graph: EnhancedGraph,\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): void {\n    const fullPath = path.join(workspaceRoot, graphPath);\n    const dir = path.dirname(fullPath);\n\n    // Ensure directory exists\n    if (!fs.existsSync(dir)) {\n        fs.mkdirSync(dir, { recursive: true });\n    }\n\n    // Sort keys for deterministic output\n    const sortedGraph: EnhancedGraph = {};\n    const sortedKeys = Object.keys(graph).sort();\n    for (const key of sortedKeys) {\n        sortedGraph[key] = graph[key];\n    }\n\n    const content = JSON.stringify(sortedGraph, null, 4) + '\\n';\n    fs.writeFileSync(fullPath, content, 'utf-8');\n}\n\n/**\n * Check if the graph file exists\n */\nexport function graphFileExists(\n    workspaceRoot: string,\n    graphPath: string = DEFAULT_GRAPH_PATH\n): boolean {\n    const fullPath = path.join(workspaceRoot, graphPath);\n    return fs.existsSync(fullPath);\n}\n"]}

package/architecture/lib/graph-loader.ts

@@ -66,7 +66,7 @@ export function saveGraph(
         sortedGraph[key] = graph[key];
     }
 
-    const content = JSON.stringify(sortedGraph, null, 2) + '\n';
+    const content = JSON.stringify(sortedGraph, null, 4) + '\n';
     fs.writeFileSync(fullPath, content, 'utf-8');
 }
 

package/executors/validate-versions/executor.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Validate Versions Executor
+ *
+ * Validates package.json versions and checks npm ci compatibility.
+ * This catches peer dependency conflicts that npm ci catches but npm install doesn't.
+ *
+ * Usage:
+ * nx run dev-config:validate-versions
+ */
+import type { ExecutorContext } from '@nx/devkit';
+export interface ValidateVersionsOptions {
+}
+export interface ExecutorResult {
+    success: boolean;
+}
+export default function runExecutor(_options: ValidateVersionsOptions, context: ExecutorContext): Promise<ExecutorResult>;

package/executors/validate-versions/executor.js

@@ -0,0 +1,210 @@
+"use strict";
+/**
+ * Validate Versions Executor
+ *
+ * Validates package.json versions and checks npm ci compatibility.
+ * This catches peer dependency conflicts that npm ci catches but npm install doesn't.
+ *
+ * Usage:
+ * nx run dev-config:validate-versions
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = runExecutor;
+const tslib_1 = require("tslib");
+const child_process_1 = require("child_process");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+// Find all package.json files except node_modules, dist, .nx, .angular
+function findPackageJsonFiles(dir, basePath = '') {
+    const files = [];
+    const items = fs.readdirSync(dir);
+    for (const item of items) {
+        const fullPath = path.join(dir, item);
+        const relativePath = path.join(basePath, item);
+        // Skip these directories
+        if (['node_modules', 'dist', '.nx', '.angular', 'tmp', '.git'].includes(item)) {
+            continue;
+        }
+        // Skip all hidden directories (starting with .)
+        if (item.startsWith('.')) {
+            continue;
+        }
+        const stat = fs.statSync(fullPath);
+        if (stat.isDirectory()) {
+            files.push(...findPackageJsonFiles(fullPath, relativePath));
+        }
+        else if (item === 'package.json') {
+            files.push(fullPath);
+        }
+    }
+    return files;
+}
+// Check if a version string uses semver ranges
+function hasSemverRange(version) {
+    // Allow workspace protocol
+    if (version.startsWith('workspace:')) {
+        return false;
+    }
+    // Allow file: protocol (for local packages)
+    if (version.startsWith('file:')) {
+        return false;
+    }
+    // Check for common semver range patterns
+    const semverPatterns = [
+        /^\^/, // ^1.2.3
+        /^~/, // ~1.2.3
+        /^\+/, // +1.2.3
+        /^\*/, // *
+        /^>/, // >1.2.3
+        /^</, // <1.2.3
+        /^>=/, // >=1.2.3
+        /^<=/, // <=1.2.3
+        /\|\|/, // 1.2.3 || 2.x
+        / - /, // 1.2.3 - 2.3.4
+        /^\d+\.x/, // 1.x, 1.2.x
+        /^latest$/, // latest
+        /^next$/, // next
+    ];
+    return semverPatterns.some((pattern) => pattern.test(version));
+}
+// Validate a single package.json file for semver ranges
+function validatePackageJson(filePath) {
+    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const pkg = JSON.parse(content);
+        const errors = [];
+        // Check dependencies
+        if (pkg.dependencies) {
+            for (const [name, version] of Object.entries(pkg.dependencies)) {
+                // Skip internal workspace packages
+                if (name.startsWith('@webpieces/')) {
+                    continue;
+                }
+                if (hasSemverRange(version)) {
+                    errors.push(`dependencies.${name}: "${version}" uses semver range (should be fixed version)`);
+                }
+            }
+        }
+        // Check devDependencies
+        if (pkg.devDependencies) {
+            for (const [name, version] of Object.entries(pkg.devDependencies)) {
+                // Skip internal workspace packages
+                if (name.startsWith('@webpieces/')) {
+                    continue;
+                }
+                if (hasSemverRange(version)) {
+                    errors.push(`devDependencies.${name}: "${version}" uses semver range (should be fixed version)`);
+                }
+            }
+        }
+        // Check peerDependencies (these can have ranges for compatibility)
+        // We don't validate peerDependencies for semver ranges since they're meant to be flexible
+        return errors;
+    }
+    catch (err) {
+        //const error = toError(err);
+        return [`Failed to parse ${filePath}: ${err.message}`];
+    }
+}
+// Check npm ci compatibility
+function checkNpmCiCompatibility(workspaceRoot) {
+    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions
+    try {
+        // Run npm install --package-lock-only to check for peer dependency conflicts
+        // This simulates what npm ci does without actually installing
+        // Use --ignore-scripts to prevent infinite recursion (avoid triggering preinstall hook)
+        console.log('   Running npm dependency resolution check (10s timeout)...');
+        (0, child_process_1.execSync)('npm install --package-lock-only --ignore-scripts 2>&1', {
+            cwd: workspaceRoot,
+            stdio: 'pipe',
+            encoding: 'utf-8',
+            timeout: 10000 // 10 second timeout
+        });
+        return [];
+    }
+    catch (err) {
+        //const error = toError(err);
+        // Check if it's a timeout
+        if (err.killed) {
+            return ['npm dependency check timed out - this might indicate a hang or network issue'];
+        }
+        // Parse the error output to extract peer dependency conflicts
+        const output = err.stdout || err.stderr || err.message;
+        // Check if it's a peer dependency error (npm error, not npm warn)
+        if (output.includes('npm error') && (output.includes('ERESOLVE') || output.includes('peer'))) {
+            return [output];
+        }
+        // If it's just warnings, not errors, we're OK
+        if (output.includes('npm warn') && !output.includes('npm error')) {
+            return [];
+        }
+        // Some other error - return it
+        return [`npm dependency check failed: ${output}`];
+    }
+}
+// Check semver ranges in all package.json files
+function checkSemverRanges(workspaceRoot) {
+    console.log('\n📋 Checking for semver ranges (warnings only):');
+    const packageFiles = findPackageJsonFiles(workspaceRoot);
+    let semverWarnings = 0;
+    for (const filePath of packageFiles) {
+        const relativePath = path.relative(workspaceRoot, filePath);
+        const errors = validatePackageJson(filePath);
+        if (errors.length > 0) {
+            console.log(`   ⚠️  ${relativePath}:`);
+            for (const error of errors) {
+                console.log(`      ${error}`);
+            }
+            semverWarnings += errors.length;
+        }
+        else {
+            console.log(`   ✅ ${relativePath}`);
+        }
+    }
+    if (semverWarnings > 0) {
+        console.log(`\n   ⚠️  Note: ${semverWarnings} semver ranges found (consider using fixed versions for reproducibility)`);
+    }
+    return { warnings: semverWarnings };
+}
+async function runExecutor(_options, context) {
+    console.log('\n🔍 Validating Package Versions and npm ci Compatibility\n');
+    const workspaceRoot = context.root;
+    // Step 1: Check npm ci compatibility
+    console.log('🔄 Checking npm ci compatibility (peer dependencies):');
+    const npmCiErrors = checkNpmCiCompatibility(workspaceRoot);
+    if (npmCiErrors.length > 0) {
+        console.log('   ❌ npm ci compatibility check failed:');
+        console.log('   This means "npm ci" will fail in CI even though "npm install" works locally.\n');
+        for (const error of npmCiErrors) {
+            const errorLines = error.split('\n').slice(0, 30);
+            for (const line of errorLines) {
+                console.log(`   ${line}`);
+            }
+            if (error.split('\n').length > 30) {
+                console.log('   ... (truncated)');
+            }
+        }
+        console.log('');
+    }
+    else {
+        console.log('   ✅ npm ci compatibility check passed');
+    }
+    // Step 2: Check for semver ranges
+    const { warnings: semverWarnings } = checkSemverRanges(workspaceRoot);
+    const packageFiles = findPackageJsonFiles(workspaceRoot);
+    // Summary
+    console.log(`\n📊 Summary:`);
+    console.log(`   npm ci compatibility: ${npmCiErrors.length === 0 ? '✅' : '❌'}`);
+    console.log(`   Files checked: ${packageFiles.length}`);
+    console.log(`   Semver warnings: ${semverWarnings}`);
+    console.log(`   Errors: ${npmCiErrors.length}`);
+    if (npmCiErrors.length > 0) {
+        console.log('\n❌ VALIDATION FAILED!');
+        console.log('   Fix peer dependency conflicts to avoid CI failures.\n');
+        return { success: false };
+    }
+    console.log('\n✅ VALIDATION PASSED!');
+    return { success: true };
+}
+//# sourceMappingURL=executor.js.map

package/executors/validate-versions/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../packages/tooling/dev-config/executors/validate-versions/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAuMH,8BA+CC;;AAnPD,iDAAyC;AACzC,+CAAyB;AACzB,mDAA6B;AAU7B,uEAAuE;AACvE,SAAS,oBAAoB,CAAC,GAAW,EAAE,QAAQ,GAAG,EAAE;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/C,yBAAyB;QACzB,IACI,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAC/D,IAAI,CACP,EACH,CAAC;YACC,SAAS;QACb,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS;QACb,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,+CAA+C;AAC/C,SAAS,cAAc,CAAC,OAAe;IACnC,2BAA2B;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,yCAAyC;IACzC,MAAM,cAAc,GAAG;QACnB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,OAAO;KACpB,CAAC;IAEF,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,SAAS,mBAAmB,CAAC,QAAgB;IACzC,8DAA8D;IAC9D,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,qBAAqB;QACrB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7D,mCAAmC;gBACnC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBACjC,SAAS;gBACb,CAAC;gBAED,IAAI,cAAc,CAAC,OAAiB,CAAC,EAAE,CAAC;oBACpC,MAAM,CAAC,IAAI,CACP,gBAAgB,IAAI,MAAM,OAAO,+CAA+C,CACnF,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChE,mCAAmC;gBACnC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBACjC,SAAS;gBACb,CAAC;gBAED,IAAI,cAAc,CAAC,OAAiB,CAAC,EAAE,CAAC;oBACpC,MAAM,CAAC,IAAI,CACP,mBAAmB,IAAI,MAAM,OAAO,+CAA+C,CACtF,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,mEAAmE;QACnE,0FAA0F;QAE1F,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,6BAA6B;QAC7B,OAAO,CAAC,mBAAmB,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;AACL,CAAC;AAED,6BAA6B;AAC7B,SAAS,uBAAuB,CAAC,aAAqB;IAClD,8DAA8D;IAC9D,IAAI,CAAC;QACD,6EAA6E;QAC7E,8DAA8D;QAC9D,wFAAwF;QACxF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,IAAA,wBAAQ,EAAC,uDAAuD,EAAE;YAC9D,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK,CAAE,oBAAoB;SACvC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,6BAA6B;QAC7B,0BAA0B;QAC1B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC5F,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC;QAEvD,kEAAkE;QAClE,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QAED,8CAA8C;QAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,OAAO,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,SAAS,iBAAiB,CAAC,aAAqB;IAC5C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,UAAU,YAAY,GAAG,CAAC,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,QAAQ,YAAY,EAAE,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,0EAA0E,CAAC,CAAC;IAC5H,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACxC,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,QAAiC,EACjC,OAAwB;IAExB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAE3E,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAEnC,qCAAqC;IACrC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;QACjG,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACtC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC;IAED,kCAAkC;IAClC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAEzD,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,uBAAuB,cAAc,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC","sourcesContent":["/**\n * Validate Versions Executor\n *\n * Validates package.json versions and checks npm ci compatibility.\n * This catches peer dependency conflicts that npm ci catches but npm install doesn't.\n *\n * Usage:\n * nx run dev-config:validate-versions\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { execSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nexport interface ValidateVersionsOptions {\n    // No options needed\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\n// Find all package.json files except node_modules, dist, .nx, .angular\nfunction findPackageJsonFiles(dir: string, basePath = ''): string[] {\n    const files: string[] = [];\n    const items = fs.readdirSync(dir);\n\n    for (const item of items) {\n        const fullPath = path.join(dir, item);\n        const relativePath = path.join(basePath, item);\n\n        // Skip these directories\n        if (\n            ['node_modules', 'dist', '.nx', '.angular', 'tmp', '.git'].includes(\n                item,\n            )\n        ) {\n            continue;\n        }\n\n        // Skip all hidden directories (starting with .)\n        if (item.startsWith('.')) {\n            continue;\n        }\n\n        const stat = fs.statSync(fullPath);\n        if (stat.isDirectory()) {\n            files.push(...findPackageJsonFiles(fullPath, relativePath));\n        } else if (item === 'package.json') {\n            files.push(fullPath);\n        }\n    }\n\n    return files;\n}\n\n// Check if a version string uses semver ranges\nfunction hasSemverRange(version: string): boolean {\n    // Allow workspace protocol\n    if (version.startsWith('workspace:')) {\n        return false;\n    }\n\n    // Allow file: protocol (for local packages)\n    if (version.startsWith('file:')) {\n        return false;\n    }\n\n    // Check for common semver range patterns\n    const semverPatterns = [\n        /^\\^/, // ^1.2.3\n        /^~/, // ~1.2.3\n        /^\\+/, // +1.2.3\n        /^\\*/, // *\n        /^>/, // >1.2.3\n        /^</, // <1.2.3\n        /^>=/, // >=1.2.3\n        /^<=/, // <=1.2.3\n        /\\|\\|/, // 1.2.3 || 2.x\n        / - /, // 1.2.3 - 2.3.4\n        /^\\d+\\.x/, // 1.x, 1.2.x\n        /^latest$/, // latest\n        /^next$/, // next\n    ];\n\n    return semverPatterns.some((pattern) => pattern.test(version));\n}\n\n// Validate a single package.json file for semver ranges\nfunction validatePackageJson(filePath: string): string[] {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        const content = fs.readFileSync(filePath, 'utf-8');\n        const pkg = JSON.parse(content);\n        const errors: string[] = [];\n\n        // Check dependencies\n        if (pkg.dependencies) {\n            for (const [name, version] of Object.entries(pkg.dependencies)) {\n                // Skip internal workspace packages\n                if (name.startsWith('@webpieces/')) {\n                    continue;\n                }\n\n                if (hasSemverRange(version as string)) {\n                    errors.push(\n                        `dependencies.${name}: \"${version}\" uses semver range (should be fixed version)`,\n                    );\n                }\n            }\n        }\n\n        // Check devDependencies\n        if (pkg.devDependencies) {\n            for (const [name, version] of Object.entries(pkg.devDependencies)) {\n                // Skip internal workspace packages\n                if (name.startsWith('@webpieces/')) {\n                    continue;\n                }\n\n                if (hasSemverRange(version as string)) {\n                    errors.push(\n                        `devDependencies.${name}: \"${version}\" uses semver range (should be fixed version)`,\n                    );\n                }\n            }\n        }\n\n        // Check peerDependencies (these can have ranges for compatibility)\n        // We don't validate peerDependencies for semver ranges since they're meant to be flexible\n\n        return errors;\n    } catch (err: any) {\n        //const error = toError(err);\n        return [`Failed to parse ${filePath}: ${err.message}`];\n    }\n}\n\n// Check npm ci compatibility\nfunction checkNpmCiCompatibility(workspaceRoot: string): string[] {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        // Run npm install --package-lock-only to check for peer dependency conflicts\n        // This simulates what npm ci does without actually installing\n        // Use --ignore-scripts to prevent infinite recursion (avoid triggering preinstall hook)\n        console.log('   Running npm dependency resolution check (10s timeout)...');\n        execSync('npm install --package-lock-only --ignore-scripts 2>&1', {\n            cwd: workspaceRoot,\n            stdio: 'pipe',\n            encoding: 'utf-8',\n            timeout: 10000  // 10 second timeout\n        });\n        return [];\n    } catch (err: any) {\n        //const error = toError(err);\n        // Check if it's a timeout\n        if (err.killed) {\n            return ['npm dependency check timed out - this might indicate a hang or network issue'];\n        }\n\n        // Parse the error output to extract peer dependency conflicts\n        const output = err.stdout || err.stderr || err.message;\n\n        // Check if it's a peer dependency error (npm error, not npm warn)\n        if (output.includes('npm error') && (output.includes('ERESOLVE') || output.includes('peer'))) {\n            return [output];\n        }\n\n        // If it's just warnings, not errors, we're OK\n        if (output.includes('npm warn') && !output.includes('npm error')) {\n            return [];\n        }\n\n        // Some other error - return it\n        return [`npm dependency check failed: ${output}`];\n    }\n}\n\n// Check semver ranges in all package.json files\nfunction checkSemverRanges(workspaceRoot: string): { warnings: number } {\n    console.log('\\n📋 Checking for semver ranges (warnings only):');\n    const packageFiles = findPackageJsonFiles(workspaceRoot);\n    let semverWarnings = 0;\n\n    for (const filePath of packageFiles) {\n        const relativePath = path.relative(workspaceRoot, filePath);\n        const errors = validatePackageJson(filePath);\n\n        if (errors.length > 0) {\n            console.log(`   ⚠️  ${relativePath}:`);\n            for (const error of errors) {\n                console.log(`      ${error}`);\n            }\n            semverWarnings += errors.length;\n        } else {\n            console.log(`   ✅ ${relativePath}`);\n        }\n    }\n\n    if (semverWarnings > 0) {\n        console.log(`\\n   ⚠️  Note: ${semverWarnings} semver ranges found (consider using fixed versions for reproducibility)`);\n    }\n\n    return { warnings: semverWarnings };\n}\n\nexport default async function runExecutor(\n    _options: ValidateVersionsOptions,\n    context: ExecutorContext\n): Promise<ExecutorResult> {\n    console.log('\\n🔍 Validating Package Versions and npm ci Compatibility\\n');\n\n    const workspaceRoot = context.root;\n\n    // Step 1: Check npm ci compatibility\n    console.log('🔄 Checking npm ci compatibility (peer dependencies):');\n    const npmCiErrors = checkNpmCiCompatibility(workspaceRoot);\n    if (npmCiErrors.length > 0) {\n        console.log('   ❌ npm ci compatibility check failed:');\n        console.log('   This means \"npm ci\" will fail in CI even though \"npm install\" works locally.\\n');\n        for (const error of npmCiErrors) {\n            const errorLines = error.split('\\n').slice(0, 30);\n            for (const line of errorLines) {\n                console.log(`   ${line}`);\n            }\n            if (error.split('\\n').length > 30) {\n                console.log('   ... (truncated)');\n            }\n        }\n        console.log('');\n    } else {\n        console.log('   ✅ npm ci compatibility check passed');\n    }\n\n    // Step 2: Check for semver ranges\n    const { warnings: semverWarnings } = checkSemverRanges(workspaceRoot);\n    const packageFiles = findPackageJsonFiles(workspaceRoot);\n\n    // Summary\n    console.log(`\\n📊 Summary:`);\n    console.log(`   npm ci compatibility: ${npmCiErrors.length === 0 ? '✅' : '❌'}`);\n    console.log(`   Files checked: ${packageFiles.length}`);\n    console.log(`   Semver warnings: ${semverWarnings}`);\n    console.log(`   Errors: ${npmCiErrors.length}`);\n\n    if (npmCiErrors.length > 0) {\n        console.log('\\n❌ VALIDATION FAILED!');\n        console.log('   Fix peer dependency conflicts to avoid CI failures.\\n');\n        return { success: false };\n    }\n\n    console.log('\\n✅ VALIDATION PASSED!');\n    return { success: true };\n}\n"]}

package/executors/validate-versions/executor.ts

@@ -0,0 +1,255 @@
+/**
+ * Validate Versions Executor
+ *
+ * Validates package.json versions and checks npm ci compatibility.
+ * This catches peer dependency conflicts that npm ci catches but npm install doesn't.
+ *
+ * Usage:
+ * nx run dev-config:validate-versions
+ */
+
+import type { ExecutorContext } from '@nx/devkit';
+import { execSync } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+
+export interface ValidateVersionsOptions {
+    // No options needed
+}
+
+export interface ExecutorResult {
+    success: boolean;
+}
+
+// Find all package.json files except node_modules, dist, .nx, .angular
+function findPackageJsonFiles(dir: string, basePath = ''): string[] {
+    const files: string[] = [];
+    const items = fs.readdirSync(dir);
+
+    for (const item of items) {
+        const fullPath = path.join(dir, item);
+        const relativePath = path.join(basePath, item);
+
+        // Skip these directories
+        if (
+            ['node_modules', 'dist', '.nx', '.angular', 'tmp', '.git'].includes(
+                item,
+            )
+        ) {
+            continue;
+        }
+
+        // Skip all hidden directories (starting with .)
+        if (item.startsWith('.')) {
+            continue;
+        }
+
+        const stat = fs.statSync(fullPath);
+        if (stat.isDirectory()) {
+            files.push(...findPackageJsonFiles(fullPath, relativePath));
+        } else if (item === 'package.json') {
+            files.push(fullPath);
+        }
+    }
+
+    return files;
+}
+
+// Check if a version string uses semver ranges
+function hasSemverRange(version: string): boolean {
+    // Allow workspace protocol
+    if (version.startsWith('workspace:')) {
+        return false;
+    }
+
+    // Allow file: protocol (for local packages)
+    if (version.startsWith('file:')) {
+        return false;
+    }
+
+    // Check for common semver range patterns
+    const semverPatterns = [
+        /^\^/, // ^1.2.3
+        /^~/, // ~1.2.3
+        /^\+/, // +1.2.3
+        /^\*/, // *
+        /^>/, // >1.2.3
+        /^</, // <1.2.3
+        /^>=/, // >=1.2.3
+        /^<=/, // <=1.2.3
+        /\|\|/, // 1.2.3 || 2.x
+        / - /, // 1.2.3 - 2.3.4
+        /^\d+\.x/, // 1.x, 1.2.x
+        /^latest$/, // latest
+        /^next$/, // next
+    ];
+
+    return semverPatterns.some((pattern) => pattern.test(version));
+}
+
+// Validate a single package.json file for semver ranges
+function validatePackageJson(filePath: string): string[] {
+    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const pkg = JSON.parse(content);
+        const errors: string[] = [];
+
+        // Check dependencies
+        if (pkg.dependencies) {
+            for (const [name, version] of Object.entries(pkg.dependencies)) {
+                // Skip internal workspace packages
+                if (name.startsWith('@webpieces/')) {
+                    continue;
+                }
+
+                if (hasSemverRange(version as string)) {
+                    errors.push(
+                        `dependencies.${name}: "${version}" uses semver range (should be fixed version)`,
+                    );
+                }
+            }
+        }
+
+        // Check devDependencies
+        if (pkg.devDependencies) {
+            for (const [name, version] of Object.entries(pkg.devDependencies)) {
+                // Skip internal workspace packages
+                if (name.startsWith('@webpieces/')) {
+                    continue;
+                }
+
+                if (hasSemverRange(version as string)) {
+                    errors.push(
+                        `devDependencies.${name}: "${version}" uses semver range (should be fixed version)`,
+                    );
+                }
+            }
+        }
+
+        // Check peerDependencies (these can have ranges for compatibility)
+        // We don't validate peerDependencies for semver ranges since they're meant to be flexible
+
+        return errors;
+    } catch (err: any) {
+        //const error = toError(err);
+        return [`Failed to parse ${filePath}: ${err.message}`];
+    }
+}
+
+// Check npm ci compatibility
+function checkNpmCiCompatibility(workspaceRoot: string): string[] {
+    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions
+    try {
+        // Run npm install --package-lock-only to check for peer dependency conflicts
+        // This simulates what npm ci does without actually installing
+        // Use --ignore-scripts to prevent infinite recursion (avoid triggering preinstall hook)
+        console.log('   Running npm dependency resolution check (10s timeout)...');
+        execSync('npm install --package-lock-only --ignore-scripts 2>&1', {
+            cwd: workspaceRoot,
+            stdio: 'pipe',
+            encoding: 'utf-8',
+            timeout: 10000  // 10 second timeout
+        });
+        return [];
+    } catch (err: any) {
+        //const error = toError(err);
+        // Check if it's a timeout
+        if (err.killed) {
+            return ['npm dependency check timed out - this might indicate a hang or network issue'];
+        }
+
+        // Parse the error output to extract peer dependency conflicts
+        const output = err.stdout || err.stderr || err.message;
+
+        // Check if it's a peer dependency error (npm error, not npm warn)
+        if (output.includes('npm error') && (output.includes('ERESOLVE') || output.includes('peer'))) {
+            return [output];
+        }
+
+        // If it's just warnings, not errors, we're OK
+        if (output.includes('npm warn') && !output.includes('npm error')) {
+            return [];
+        }
+
+        // Some other error - return it
+        return [`npm dependency check failed: ${output}`];
+    }
+}
+
+// Check semver ranges in all package.json files
+function checkSemverRanges(workspaceRoot: string): { warnings: number } {
+    console.log('\n📋 Checking for semver ranges (warnings only):');
+    const packageFiles = findPackageJsonFiles(workspaceRoot);
+    let semverWarnings = 0;
+
+    for (const filePath of packageFiles) {
+        const relativePath = path.relative(workspaceRoot, filePath);
+        const errors = validatePackageJson(filePath);
+
+        if (errors.length > 0) {
+            console.log(`   ⚠️  ${relativePath}:`);
+            for (const error of errors) {
+                console.log(`      ${error}`);
+            }
+            semverWarnings += errors.length;
+        } else {
+            console.log(`   ✅ ${relativePath}`);
+        }
+    }
+
+    if (semverWarnings > 0) {
+        console.log(`\n   ⚠️  Note: ${semverWarnings} semver ranges found (consider using fixed versions for reproducibility)`);
+    }
+
+    return { warnings: semverWarnings };
+}
+
+export default async function runExecutor(
+    _options: ValidateVersionsOptions,
+    context: ExecutorContext
+): Promise<ExecutorResult> {
+    console.log('\n🔍 Validating Package Versions and npm ci Compatibility\n');
+
+    const workspaceRoot = context.root;
+
+    // Step 1: Check npm ci compatibility
+    console.log('🔄 Checking npm ci compatibility (peer dependencies):');
+    const npmCiErrors = checkNpmCiCompatibility(workspaceRoot);
+    if (npmCiErrors.length > 0) {
+        console.log('   ❌ npm ci compatibility check failed:');
+        console.log('   This means "npm ci" will fail in CI even though "npm install" works locally.\n');
+        for (const error of npmCiErrors) {
+            const errorLines = error.split('\n').slice(0, 30);
+            for (const line of errorLines) {
+                console.log(`   ${line}`);
+            }
+            if (error.split('\n').length > 30) {
+                console.log('   ... (truncated)');
+            }
+        }
+        console.log('');
+    } else {
+        console.log('   ✅ npm ci compatibility check passed');
+    }
+
+    // Step 2: Check for semver ranges
+    const { warnings: semverWarnings } = checkSemverRanges(workspaceRoot);
+    const packageFiles = findPackageJsonFiles(workspaceRoot);
+
+    // Summary
+    console.log(`\n📊 Summary:`);
+    console.log(`   npm ci compatibility: ${npmCiErrors.length === 0 ? '✅' : '❌'}`);
+    console.log(`   Files checked: ${packageFiles.length}`);
+    console.log(`   Semver warnings: ${semverWarnings}`);
+    console.log(`   Errors: ${npmCiErrors.length}`);
+
+    if (npmCiErrors.length > 0) {
+        console.log('\n❌ VALIDATION FAILED!');
+        console.log('   Fix peer dependency conflicts to avoid CI failures.\n');
+        return { success: false };
+    }
+
+    console.log('\n✅ VALIDATION PASSED!');
+    return { success: true };
+}

package/executors/validate-versions/schema.json

@@ -0,0 +1,8 @@
+{
+    "$schema": "http://json-schema.org/schema",
+    "title": "Validate Versions Executor",
+    "description": "Validates package.json versions and checks npm ci compatibility",
+    "type": "object",
+    "properties": {},
+    "required": []
+}

package/executors.json

@@ -34,6 +34,11 @@
             "implementation": "./executors/validate-eslint-sync/executor",
             "schema": "./executors/validate-eslint-sync/schema.json",
             "description": "Validate that workspace and template eslint.webpieces.config.mjs files have identical rules"
+        },
+        "validate-versions": {
+            "implementation": "./executors/validate-versions/executor",
+            "schema": "./executors/validate-versions/schema.json",
+            "description": "Validate package.json versions and npm ci compatibility"
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/dev-config",
-  "version": "0.2.33",
+  "version": "0.2.35",
   "description": "Development configuration, scripts, and patterns for WebPieces projects",
   "type": "commonjs",
   "bin": {