pnpm-dedup 2.1.0

package/dist/identifyClusterFixes.test.js

@@ -0,0 +1,307 @@
+import { describe, it } from "bun:test";
+import { deepStrictEqual, ok, strictEqual } from "node:assert/strict";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { buildPnpmPackagesMap } from "./helpers/buildPnpmPackagesMap.js";
+import { parsePnpmLockPackages } from "./helpers/parsePnpmLockPackages.js";
+import { createManifestReader } from "./helpers/readInstalledManifest.js";
+import { identifyClusterFixes } from "./identifyClusterFixes.js";
+import { readPnpmLock } from "./readPnpmLock.js";
+const fixturesBase = (rel) => fileURLToPath(new URL(rel, import.meta.url));
+// The fixtures are committed without node_modules, so the declared ranges of
+// the requesters that matter are stubbed; the others fall back to their
+// resolved version, as an uninstalled project would.
+const manifests = {
+    "@tamagui/metro-plugin@1.139.4": {
+        "metro-config": "*",
+        "metro-transform-worker": "*",
+    },
+    "@react-native/community-cli-plugin@0.87.0": { metro: "^0.87.0" },
+    "@react-native/metro-config@0.87.0": { "metro-config": "^0.87.0" },
+    "react-native-web@0.21.2": { "@react-native/normalize-colors": "^0.74.1" },
+    "react-native-reanimated@4.5.3": { "react-native": "0.83 - 0.86" },
+    "react-native-worklets@0.11.4": {
+        "react-native": "0.83 - 0.86",
+        "@react-native/metro-config": "*",
+    },
+    "@pob/eslint-config@65.5.0": {
+        "@typescript-eslint/eslint-plugin": "^8.59.1",
+        "@typescript-eslint/parser": "^8.59.1",
+        "typescript-eslint": "^8.59.1",
+    },
+    "@pob/eslint-plugin@65.5.0": { "@typescript-eslint/utils": "8.59.1" },
+    "eslint-plugin-import-x@4.16.2": {
+        "@typescript-eslint/types": "^8.56.0",
+        "@typescript-eslint/utils": "^8.56.0",
+    },
+};
+// The @tamagui/* and react-native-* packages peer-depend on react-native with
+// an open range (`*`, or `0.83 - 0.86` for reanimated/worklets, both above):
+// without them react-native's ranges read as exact resolved versions and the
+// "nobody asks for this version" guard is never exercised.
+const readStubbedManifest = (name, version) => {
+    const dependencies = manifests[`${name}@${version}`];
+    if (dependencies)
+        return { dependencies };
+    if (name.startsWith("@tamagui/") || name.startsWith("react-native-")) {
+        return { peerDependencies: { "react-native": "*" } };
+    }
+    return undefined;
+};
+const clusterFixesFor = (scenario, readManifest = readStubbedManifest) => {
+    const lock = readPnpmLock(fixturesBase(`../test/fixtures/${scenario}/pnpm-lock.yaml`));
+    return identifyClusterFixes(lock, buildPnpmPackagesMap(parsePnpmLockPackages(lock)), readManifest);
+};
+// Only the families: a duplicate with no lockstep sibling is reported as a
+// cluster of one, which the tests below single out on its own.
+const lockstepFixesFor = (scenario, readManifest = readStubbedManifest) => clusterFixesFor(scenario, readManifest).filter((fix) => fix.members.length > 1);
+const metroCluster = () => {
+    const fix = clusterFixesFor("wildcard-not-reused").find((candidate) => candidate.members.includes("metro"));
+    ok(fix, "expected a cluster containing metro");
+    return fix;
+};
+describe("identifyClusterFixes", () => {
+    // Same expectations as bun-dedup's identifyClusterFixes on its own
+    // `duplicated-typescript-eslint` fixture: the pnpm adapter must reach the
+    // same conclusion from a lockfile shaped very differently.
+    it("identifies the @typescript-eslint cluster dedupable to 8.59.1", () => {
+        const fixes = lockstepFixesFor("duplicated-typescript-eslint");
+        strictEqual(fixes.length, 1);
+        const fix = fixes[0];
+        strictEqual(fix.applicable, true);
+        strictEqual(fix.target, "8.59.1");
+        strictEqual(fix.direction, "down");
+        strictEqual(fix.needsRoundTrip, true);
+        ok(fix.members.includes("typescript-eslint"));
+        deepStrictEqual(fix.duplicatedMembers, [
+            "@typescript-eslint/project-service",
+            "@typescript-eslint/scope-manager",
+            "@typescript-eslint/tsconfig-utils",
+            "@typescript-eslint/types",
+            "@typescript-eslint/typescript-estree",
+            "@typescript-eslint/utils",
+            "@typescript-eslint/visitor-keys",
+        ]);
+        deepStrictEqual(fix.reResolutionSet, [
+            "@typescript-eslint/eslint-plugin",
+            "@typescript-eslint/parser",
+            "typescript-eslint",
+        ]);
+    });
+    it("finds no target when the requesters' manifests are unavailable", () => {
+        // Without node_modules every transitive range degrades to the resolved
+        // version, so `@pob/eslint-config`'s `^8.59.1` reads as `8.61.0` and
+        // `@pob/eslint-plugin`'s pin keeps utils at 8.59.1: no version is left that
+        // any duplicate can collapse onto.
+        const fixes = lockstepFixesFor("duplicated-typescript-eslint", () => undefined);
+        strictEqual(fixes.length, 1);
+        const fix = fixes[0];
+        strictEqual(fix.applicable, false);
+        strictEqual(fix.target, null);
+        deepStrictEqual(fix.reuseFixes, []);
+    });
+    // `hoisted-node-linker` is the shape of a real repo that reported no fix at
+    // all: with `nodeLinker: hoisted` there is no `node_modules/.pnpm/<pkg>` to
+    // read, so every declared range degraded to the resolved version. It is the
+    // only fixture whose manifests are committed, so the real reader runs here.
+    const hoistedFixtureDir = fixturesBase("../test/fixtures/hoisted-node-linker");
+    const hoistedClusterFix = (readManifest) => {
+        const lock = readPnpmLock(join(hoistedFixtureDir, "pnpm-lock.yaml"));
+        const fixes = identifyClusterFixes(lock, buildPnpmPackagesMap(parsePnpmLockPackages(lock)), readManifest);
+        strictEqual(fixes.length, 1);
+        return fixes[0];
+    };
+    it("reads the ranges out of a hoisted node_modules", () => {
+        const fix = hoistedClusterFix(createManifestReader(hoistedFixtureDir));
+        // the pinned 0.84.5 wins: `mini-plugin` asks for `*`, so nothing external
+        // wants 0.87.0 and the pin needs no editing
+        strictEqual(fix.applicable, true);
+        strictEqual(fix.target, "0.84.5");
+        strictEqual(fix.direction, "down");
+        deepStrictEqual(fix.convergentMembers, ["mini-metro", "mini-metro-config"]);
+        deepStrictEqual(fix.driverMembers, ["mini-metro"]);
+        deepStrictEqual(fix.workspaceChanges, []);
+        strictEqual(fix.needsRoundTrip, false);
+        deepStrictEqual(fix.reuseFixes.map((reuse) => `${reuse.requesterName}>${reuse.packageName} ${reuse.from} -> ${reuse.to}`), [
+            // read from a nested manifest three levels deep, via `.modules.yaml`
+            "mini-deep>mini-metro-config 0.87.0 -> 0.84.5",
+            "mini-plugin>mini-metro-config 0.87.0 -> 0.84.5",
+        ]);
+    });
+    it("inverts the advice when the layout hides the manifests", () => {
+        // What the same lockfile reports when the manifests cannot be read:
+        // `mini-plugin`'s `*` reads as an exact `0.87.0`, so keeping the pin
+        // collapses nothing and the fix becomes "upgrade the pin" — the opposite of
+        // the answer above. Hence the warning when nothing is readable.
+        const fix = hoistedClusterFix(() => undefined);
+        strictEqual(fix.target, "0.87.0");
+        strictEqual(fix.direction, "up");
+        deepStrictEqual(fix.workspaceChanges.map((change) => `${change.packageName} ${change.range} -> ${change.to}`), ["mini-metro 0.84.5 -> 0.87.0"]);
+        deepStrictEqual(fix.reuseFixes, []);
+    });
+    it("returns no cluster fix when there is no lockstep family", () => {
+        deepStrictEqual(lockstepFixesFor("duplicated-printable-shell-command"), []);
+    });
+    // `exact-pin-forces-downgrade` commits its virtual store, so the real reader
+    // runs: `@yudiel/react-qr-scanner` pins barcode-detector at exactly 3.0.3
+    // while `expo-camera` declares `^3.0.0` and resolved 3.2.2.
+    const downgradeFixtureDir = fixturesBase("../test/fixtures/exact-pin-forces-downgrade");
+    it("converges a lone duplicate on the version every range accepts", () => {
+        const fixes = clusterFixesFor("exact-pin-forces-downgrade", createManifestReader(downgradeFixtureDir));
+        const fix = fixes.find((candidate) => candidate.members.includes("barcode-detector"));
+        ok(fix, "expected a fix for barcode-detector");
+        deepStrictEqual(fix.members, ["barcode-detector"]);
+        strictEqual(fix.applicable, true);
+        // 3.2.2 is rejected by the exact pin, so converging means moving the caret
+        // dependent down — which only an override can do
+        strictEqual(fix.target, "3.0.3");
+        strictEqual(fix.direction, "down");
+        deepStrictEqual(fix.convergentMembers, ["barcode-detector"]);
+        deepStrictEqual(fix.driverMembers, ["barcode-detector"]);
+        deepStrictEqual(fix.workspaceChanges, []);
+        deepStrictEqual(fix.externalConstraints.map((constraint) => [
+            constraint.requesterName,
+            constraint.range,
+        ]), [
+            ["@yudiel/react-qr-scanner", "3.0.3"],
+            ["expo-camera", "^3.0.0"],
+        ]);
+    });
+    it("finds nothing for the duplicate a convergence drags along", () => {
+        const fixes = clusterFixesFor("exact-pin-forces-downgrade", createManifestReader(downgradeFixtureDir));
+        const fix = fixes.find((candidate) => candidate.members.includes("zxing-wasm"));
+        ok(fix, "expected a fix record for zxing-wasm");
+        // barcode-detector@3.0.3 asks `^2.1.2` and 3.2.2 asks exactly 3.1.3
+        strictEqual(fix.applicable, false);
+        strictEqual(fix.target, null);
+    });
+    it("leaves a lone duplicate alone when only a workspace pin could move", () => {
+        // `printable-shell-command` is pinned at 5.0.7 by the workspace and at
+        // 5.3.1 by `betterdisplaycli`: converging means bumping the user's own pin,
+        // which is an upgrade decision rather than a dedupe.
+        deepStrictEqual(clusterFixesFor("duplicated-printable-shell-command"), []);
+    });
+    it("skips clusters whose members are all single-version", () => {
+        for (const fix of lockstepFixesFor("wildcard-not-reused")) {
+            ok(fix.duplicatedMembers.length > 0);
+        }
+    });
+    it("detects the metro family the non-reused wildcard duplicated", () => {
+        const fix = metroCluster();
+        for (const member of [
+            "metro",
+            "metro-config",
+            "metro-transform-worker",
+            "ob1",
+        ]) {
+            ok(fix.duplicatedMembers.includes(member), `expected ${member}`);
+        }
+        strictEqual(fix.duplicatedMembers.length, 16);
+    });
+    it("keeps external constraints and drops the derived internal pins", () => {
+        const byRequester = metroCluster().externalConstraints.map((constraint) => `${constraint.requesterName ?? "workspace"} -> ${constraint.packageName} @ ${constraint.range}`);
+        for (const expected of [
+            "workspace -> metro @ 0.84.5",
+            "@tamagui/metro-plugin -> metro-config @ *",
+            "@tamagui/metro-plugin -> metro-transform-worker @ *",
+            "react-native-web -> @react-native/normalize-colors @ ^0.74.1",
+        ]) {
+            ok(byRequester.includes(expected), `expected constraint ${expected}`);
+        }
+        // metro's own `metro-config: 0.84.5` / `0.87.0` pins are internal: they
+        // exist only because metro resolved where it did.
+        const requesterNames = new Set(metroCluster().externalConstraints.map((constraint) => constraint.requesterName));
+        strictEqual(requesterNames.has("metro"), false);
+        strictEqual(requesterNames.has("metro-config"), false);
+    });
+    it("converges the family on the pinned version, without touching the pin", () => {
+        const fix = metroCluster();
+        // The root pins metro at 0.84.5 on purpose, so the pin is a constraint to
+        // resolve around, not something to upgrade: the family collapses onto
+        // 0.84.5 and `workspaceChanges` stays empty.
+        strictEqual(fix.applicable, true);
+        strictEqual(fix.target, "0.84.5");
+        strictEqual(fix.direction, "down");
+        strictEqual(fix.convergentMembers.length, 15);
+        deepStrictEqual(fix.workspaceChanges, []);
+        // metro is the only member a real range applies to (the pin): the 14
+        // metro-* packages are requested through `*` or through metro's own exact
+        // pins, so they carry no decision and follow it.
+        deepStrictEqual(fix.driverMembers, ["metro"]);
+    });
+    it("leaves react-native's version to the resolver", () => {
+        const fix = metroCluster();
+        // react-native@0.87.0 and @react-native/metro-config@0.87.0 are what hold
+        // the 0.87.0 metro subtree, and nothing pins either of them there — both
+        // arrive through `*` / `0.83 - 0.86` peer ranges (0.87.0 does not even
+        // satisfy the latter). They have to move, but which version they land on is
+        // the resolver's call, so no version is asserted for them.
+        deepStrictEqual(fix.floatingMembers, [
+            "@react-native/metro-config",
+            "react-native",
+        ]);
+        deepStrictEqual(fix.reResolutionSet, []);
+        strictEqual(fix.needsRoundTrip, true);
+    });
+    it("repoints the wildcards that ignored the pinned version", () => {
+        const fix = metroCluster();
+        // What the fixture is actually about: `@tamagui/metro-plugin` declares
+        // `metro-config: "*"` / `metro-transform-worker: "*"`, and pnpm resolved
+        // both to 0.87.0 although the pinned 0.84.5 was already in the tree and the
+        // range accepts it — so the plugin runs against a different metro than the
+        // app's.
+        strictEqual(fix.anchor, "0.84.5");
+        deepStrictEqual(fix.reuseFixes.map((reuse) => `${reuse.requesterName}>${reuse.packageName} "${reuse.range}" ${reuse.from} -> ${reuse.to}`), [
+            '@tamagui/metro-plugin>metro-config "*" 0.87.0 -> 0.84.5',
+            '@tamagui/metro-plugin>metro-transform-worker "*" 0.87.0 -> 0.84.5',
+        ]);
+    });
+    it("leaves alone the ranges that cannot accept the pinned version", () => {
+        const repointed = new Set(metroCluster().reuseFixes.map((reuse) => reuse.packageName));
+        // `@react-native/metro-config` requires `metro-config: ^0.87.0`, and
+        // `react-native-web` requires `@react-native/normalize-colors: ^0.74.1`:
+        // neither accepts 0.84.5, so neither is repointed.
+        strictEqual(repointed.has("@react-native/normalize-colors"), false);
+        deepStrictEqual(metroCluster()
+            .reuseFixes.filter((reuse) => reuse.requesterName === "@react-native/metro-config")
+            .map((reuse) => reuse.packageName), []);
+    });
+    // `aliased-swapped-names`: the importer pins the real `typescript` at 7.0.2
+    // through the `@typescript/native` key while `tool` needs 5.9.3, and the
+    // `typescript` key holds an unrelated package. Nothing converges, and nothing
+    // may propose editing the declaration that names the other package.
+    it("leaves an exact pin declared under a swapped alias key alone", () => {
+        const fixes = clusterFixesFor("aliased-swapped-names", () => undefined);
+        deepStrictEqual(fixes.map((fix) => fix.members), [["typescript"]]);
+        strictEqual(fixes[0].applicable, false);
+        deepStrictEqual(fixes[0].workspaceChanges, []);
+    });
+    // The same swapped keys, with `typescript` sitting in a lockstep family (its
+    // platform binaries) as it does from 7.0.0 on: the family makes the cluster
+    // big enough to escape the singleton guard above, and the pin is then the only
+    // thing standing between the dedupe and a rewrite of `"@typescript/native":
+    // "npm:typescript@7.0.2"` into `npm:typescript@6.0.3` — the alias repointed at
+    // the very package it exists to sit beside.
+    it("never repoints an alias to converge its family", () => {
+        const fix = clusterFixesFor("aliased-swapped-names-cluster", (name, version) => name === "@typescript/typescript6" && version === "6.0.2"
+            ? { dependencies: { typescript: "^6" } }
+            : undefined).find((candidate) => candidate.members.includes("typescript"));
+        ok(fix);
+        strictEqual(fix.members.length, 3);
+        deepStrictEqual(fix.duplicatedMembers, ["typescript"]);
+        strictEqual(fix.applicable, false);
+        strictEqual(fix.target, null);
+        deepStrictEqual(fix.workspaceChanges, []);
+    });
+    it("reports a cluster no member can leave as not dedupable", () => {
+        // metro pins hermes-parser exactly at 0.35.0 and @react-native/* at 0.36.1,
+        // and hermes-estree only exists twice because hermes-parser does: nothing
+        // can collapse.
+        const fix = clusterFixesFor("wildcard-not-reused").find((candidate) => candidate.members.includes("hermes-parser"));
+        ok(fix);
+        strictEqual(fix.applicable, false);
+        strictEqual(fix.target, null);
+        deepStrictEqual(fix.convergentMembers, []);
+    });
+});
+//# sourceMappingURL=identifyClusterFixes.test.js.map

package/dist/identifyClusterFixes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identifyClusterFixes.test.js","sourceRoot":"","sources":["../src/identifyClusterFixes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE,CACnC,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/C,6EAA6E;AAC7E,wEAAwE;AACxE,qDAAqD;AACrD,MAAM,SAAS,GAA2C;IACxD,+BAA+B,EAAE;QAC/B,cAAc,EAAE,GAAG;QACnB,wBAAwB,EAAE,GAAG;KAC9B;IACD,2CAA2C,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;IACjE,mCAAmC,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE;IAClE,yBAAyB,EAAE,EAAE,gCAAgC,EAAE,SAAS,EAAE;IAC1E,+BAA+B,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;IAClE,8BAA8B,EAAE;QAC9B,cAAc,EAAE,aAAa;QAC7B,4BAA4B,EAAE,GAAG;KAClC;IACD,2BAA2B,EAAE;QAC3B,kCAAkC,EAAE,SAAS;QAC7C,2BAA2B,EAAE,SAAS;QACtC,mBAAmB,EAAE,SAAS;KAC/B;IACD,2BAA2B,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE;IACrE,+BAA+B,EAAE;QAC/B,0BAA0B,EAAE,SAAS;QACrC,0BAA0B,EAAE,SAAS;KACtC;CACF,CAAC;AAEF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,2DAA2D;AAC3D,MAAM,mBAAmB,GAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IACrD,IAAI,YAAY;QAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,QAAgB,EAChB,YAAY,GAAmB,mBAAmB,EACpC,EAAE;IAChB,MAAM,IAAI,GAAG,YAAY,CACvB,YAAY,CAAC,oBAAoB,QAAQ,iBAAiB,CAAC,CAC5D,CAAC;IACF,OAAO,oBAAoB,CACzB,IAAI,EACJ,oBAAoB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,EACjD,YAAY,CACb,CAAC;AACJ,CAAC,CAAC;AAEF,2EAA2E;AAC3E,+DAA+D;AAC/D,MAAM,gBAAgB,GAAG,CACvB,QAAgB,EAChB,YAAY,GAAmB,mBAAmB,EACpC,EAAE,CAChB,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,MAAM,CAC5C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAChC,CAAC;AAEJ,MAAM,YAAY,GAAG,GAAe,EAAE;IACpC,MAAM,GAAG,GAAG,eAAe,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACpE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpC,CAAC;IACF,EAAE,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,mEAAmE;IACnE,0EAA0E;IAC1E,2DAA2D;IAC3D,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;QAC/D,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAEtB,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACtC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC9C,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE;YACrC,oCAAoC;YACpC,kCAAkC;YAClC,mCAAmC;YACnC,0BAA0B;YAC1B,sCAAsC;YACtC,0BAA0B;YAC1B,iCAAiC;SAClC,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE;YACnC,kCAAkC;YAClC,2BAA2B;YAC3B,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,4EAA4E;QAC5E,mCAAmC;QACnC,MAAM,KAAK,GAAG,gBAAgB,CAC5B,8BAA8B,EAC9B,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,YAAY,CACpC,sCAAsC,CACvC,CAAC;IAEF,MAAM,iBAAiB,GAAG,CAAC,YAA4B,EAAc,EAAE;QACrE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,oBAAoB,CAChC,IAAI,EACJ,oBAAoB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,EACjD,YAAY,CACb,CAAC;QACF,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IACnB,CAAC,CAAC;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEvE,0EAA0E;QAC1E,4CAA4C;QAC5C,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC5E,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACnD,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC1C,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACvC,eAAe,CACb,GAAG,CAAC,UAAU,CAAC,GAAG,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,EAAE,CAC7E,EACD;YACE,qEAAqE;YACrE,8CAA8C;YAC9C,gDAAgD;SACjD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,oEAAoE;QACpE,qEAAqE;QACrE,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE/C,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,eAAe,CACb,GAAG,CAAC,gBAAgB,CAAC,GAAG,CACtB,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,EAAE,EAAE,CACpE,EACD,CAAC,6BAA6B,CAAC,CAChC,CAAC;QACF,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,eAAe,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,mBAAmB,GAAG,YAAY,CACtC,6CAA6C,CAC9C,CAAC;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,eAAe,CAC3B,4BAA4B,EAC5B,oBAAoB,CAAC,mBAAmB,CAAC,CAC1C,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC/C,CAAC;QACF,EAAE,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;QAE/C,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnD,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,2EAA2E;QAC3E,iDAAiD;QACjD,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC7D,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzD,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC1C,eAAe,CACb,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YAC1C,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,KAAK;SACjB,CAAC,EACF;YACE,CAAC,0BAA0B,EAAE,OAAO,CAAC;YACrC,CAAC,aAAa,EAAE,QAAQ,CAAC;SAC1B,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,eAAe,CAC3B,4BAA4B,EAC5B,oBAAoB,CAAC,mBAAmB,CAAC,CAC1C,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CACzC,CAAC;QACF,EAAE,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;QAEhD,oEAAoE;QACpE,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,qDAAqD;QACrD,eAAe,CAAC,eAAe,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC1D,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,KAAK,MAAM,MAAM,IAAI;YACnB,OAAO;YACP,cAAc;YACd,wBAAwB;YACxB,KAAK;SACN,EAAE,CAAC;YACF,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,mBAAmB,CAAC,GAAG,CACxD,CAAC,UAAU,EAAE,EAAE,CACb,GAAG,UAAU,CAAC,aAAa,IAAI,WAAW,OAAO,UAAU,CAAC,WAAW,MAAM,UAAU,CAAC,KAAK,EAAE,CAClG,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI;YACrB,6BAA6B;YAC7B,2CAA2C;YAC3C,qDAAqD;YACrD,8DAA8D;SAC/D,EAAE,CAAC;YACF,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,YAAY,EAAE,CAAC,mBAAmB,CAAC,GAAG,CACpC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,CACzC,CACF,CAAC;QACF,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAChD,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,0EAA0E;QAC1E,sEAAsE;QACtE,6CAA6C;QAC7C,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAE1C,qEAAqE;QACrE,0EAA0E;QAC1E,iDAAiD;QACjD,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,4EAA4E;QAC5E,2DAA2D;QAC3D,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE;YACnC,4BAA4B;YAC5B,cAAc;SACf,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACzC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,uEAAuE;QACvE,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,SAAS;QACT,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,eAAe,CACb,GAAG,CAAC,UAAU,CAAC,GAAG,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,EAAE,CAC9F,EACD;YACE,yDAAyD;YACzD,mEAAmE;SACpE,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,YAAY,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAC5D,CAAC;QAEF,qEAAqE;QACrE,yEAAyE;QACzE,mDAAmD;QACnD,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,eAAe,CACb,YAAY,EAAE;aACX,UAAU,CAAC,MAAM,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,4BAA4B,CAChE;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EACpC,EAAE,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,oEAAoE;IACpE,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,eAAe,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,eAAe,CACb,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAC/B,CAAC,CAAC,YAAY,CAAC,CAAC,CACjB,CAAC;QACF,WAAW,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,4CAA4C;IAC5C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,eAAe,CACzB,+BAA+B,EAC/B,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAChB,IAAI,KAAK,yBAAyB,IAAI,OAAO,KAAK,OAAO;YACvD,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;YACxC,CAAC,CAAC,SAAS,CAChB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,EAAE,CAAC,GAAG,CAAC,CAAC;QACR,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACvD,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,4EAA4E;QAC5E,0EAA0E;QAC1E,gBAAgB;QAChB,MAAM,GAAG,GAAG,eAAe,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACpE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAC5C,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,CAAC;QACR,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/identifyResolutionFixes.test.js

@@ -0,0 +1,49 @@
+import { describe, expect, it } from "bun:test";
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+import { identifyResolutionFixes } from "pm-dedup-core";
+const loadResolutionsFixture = (fileName) => {
+    return JSON.parse(fs.readFileSync(fileURLToPath(new URL(`../test/fixtures/resolutions/${fileName}`, import.meta.url)), 
+    // eslint-disable-next-line unicorn/prefer-json-parse-buffer
+    "utf8"));
+};
+const loadDependentsFixture = (fileName) => {
+    return JSON.parse(fs.readFileSync(fileURLToPath(new URL(`../test/fixtures/dependents/${fileName}`, import.meta.url)), 
+    // eslint-disable-next-line unicorn/prefer-json-parse-buffer
+    "utf8"));
+};
+const objetToMap = (obj) => new Map(Object.entries(obj));
+describe("identifyResolutionFixes", () => {
+    it("should return an empty array when there are no resolutions", () => {
+        const resolutions = [];
+        const fixes = identifyResolutionFixes(resolutions, objetToMap({}));
+        expect(fixes).toEqual([]);
+    });
+    it("should return an empty array when there is only one resolution", () => {
+        const resolutions = loadResolutionsFixture("semver-7.7.3.json");
+        const dependents = loadDependentsFixture("semver-7.7.3.json");
+        const fixes = identifyResolutionFixes(resolutions, objetToMap(dependents));
+        expect(fixes).toEqual([]);
+    });
+    it("should not identify fixes when dependencies are not compatible", () => {
+        const resolutions = loadResolutionsFixture("babel-code-frame-7.26.2-7.27.1.json");
+        const dependents = loadDependentsFixture("babel-code-frame-7.26.2-7.27.1.json");
+        const fixes = identifyResolutionFixes(resolutions, objetToMap(dependents));
+        expect(fixes).toEqual([]);
+    });
+    it("should identify resolution fixes when dependencies are compatible", () => {
+        const resolutions = loadResolutionsFixture("printable-shell-command-5.0.7-5.0.8.json");
+        const dependents = loadDependentsFixture("printable-shell-command-5.0.7-5.0.8.json");
+        const fixes = identifyResolutionFixes(resolutions, objetToMap(dependents));
+        expect(fixes).toEqual([
+            {
+                mergeableResolutions: [
+                    "printable-shell-command@5.0.7",
+                    "printable-shell-command@5.0.8",
+                ],
+                to: "printable-shell-command@5.0.8",
+            },
+        ]);
+    });
+});
+//# sourceMappingURL=identifyResolutionFixes.test.js.map

package/dist/identifyResolutionFixes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identifyResolutionFixes.test.js","sourceRoot":"","sources":["../src/identifyResolutionFixes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAIxD,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAuB,EAAE;IACvE,OAAO,IAAI,CAAC,KAAK,CACf,EAAE,CAAC,YAAY,CACb,aAAa,CACX,IAAI,GAAG,CAAC,gCAAgC,QAAQ,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACrE;IACD,4DAA4D;IAC5D,MAAM,CACP,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,QAAgB,EACa,EAAE;IAC/B,OAAO,IAAI,CAAC,KAAK,CACf,EAAE,CAAC,YAAY,CACb,aAAa,CACX,IAAI,GAAG,CAAC,+BAA+B,QAAQ,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACpE;IACD,4DAA4D;IAC5D,MAAM,CACP,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAsB,GAAiB,EAAa,EAAE,CACvE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAa,CAAC,CAAC;AAE3C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,WAAW,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,WAAW,GAAG,sBAAsB,CACxC,qCAAqC,CACtC,CAAC;QACF,MAAM,UAAU,GAAG,qBAAqB,CACtC,qCAAqC,CACtC,CAAC;QACF,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,WAAW,GAAG,sBAAsB,CACxC,0CAA0C,CAC3C,CAAC;QACF,MAAM,UAAU,GAAG,qBAAqB,CACtC,0CAA0C,CAC3C,CAAC;QAEF,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB;gBACE,oBAAoB,EAAE;oBACpB,+BAA+B;oBAC/B,+BAA+B;iBAChC;gBACD,EAAE,EAAE,+BAA+B;aACpC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -0,0 +1,86 @@
+import { createPackageFilter, selectExplainedPackages, selectPackages, } from "pm-dedup-core";
+import { displayMany } from "./displayMany.js";
+import { buildPnpmPackagesMap, filterDuplicatesPnpmPackagesMap, } from "./helpers/buildPnpmPackagesMap.js";
+import { collectDependentRanges } from "./helpers/collectDependentRanges.js";
+import { parsePnpmLockPackages } from "./helpers/parsePnpmLockPackages.js";
+import { lockPathOf, resolvePnpmProjectDir } from "./helpers/projectDir.js";
+import { createManifestReaderWithStats } from "./helpers/readInstalledManifest.js";
+import { identifyClusterFixes } from "./identifyClusterFixes.js";
+import { readPnpmLock } from "./readPnpmLock.js";
+export { dedupe } from "./dedupe.js";
+export { applyClusterFixes } from "./applyClusterFixes.js";
+export { identifyClusterFixes } from "./identifyClusterFixes.js";
+export { toLockstepGraph } from "./helpers/toLockstepGraph.js";
+export { displayMany } from "./displayMany.js";
+export { readPnpmLock } from "./readPnpmLock.js";
+export { parsePnpmLockPackages } from "./helpers/parsePnpmLockPackages.js";
+export { buildPnpmPackagesMap, filterDuplicatesPnpmPackagesMap, } from "./helpers/buildPnpmPackagesMap.js";
+export { collectPnpmDependents } from "./helpers/collectPnpmDependents.js";
+export { collectDependentRanges } from "./helpers/collectDependentRanges.js";
+export { readVersionsSnapshot } from "./helpers/versionsSnapshot.js";
+export { createManifestReader, createManifestReaderWithStats, } from "./helpers/readInstalledManifest.js";
+/**
+ * Every declared range of a transitive dependent is read from its installed
+ * manifest; the lockfile only stores resolved versions. When nothing is
+ * readable, each range degrades to an exact version and the reported fixes are
+ * not merely fewer but wrong — so say so instead of printing a confident answer.
+ */
+function warnWhenNoManifests(stats) {
+    if (stats.found > 0 || stats.missed === 0)
+        return;
+    console.log();
+    console.log("Warning: no installed manifest could be read under node_modules, so every dependent's range fell back to its resolved version and the fixes above are unreliable. Run `pnpm install` first.");
+}
+// The report and the fixes must agree on what every requester asked for, so
+// both read the declared ranges the lockfile does not store.
+function collectRanges(lock, packagesMap, readManifest) {
+    return collectDependentRanges(lock, new Set(Object.keys(packagesMap)), readManifest);
+}
+export function whyDuplicate({ filter: filterOptions, all = false, details = false, }) {
+    const filter = createPackageFilter(filterOptions);
+    const projectDir = resolvePnpmProjectDir();
+    if (projectDir === null)
+        return;
+    const lock = readPnpmLock(lockPathOf(projectDir));
+    const parsed = parsePnpmLockPackages(lock);
+    const packagesMap = buildPnpmPackagesMap(parsed);
+    const { packages: filteredPackages, title, notice, } = selectExplainedPackages({ packagesMap, filter, all });
+    const { readManifest, stats } = createManifestReaderWithStats(projectDir);
+    // A duplicate is often only explainable by its family: show the cluster fixes
+    // covering the matched packages, not just their own dependents.
+    const matchedClusterFixes = identifyClusterFixes(lock, packagesMap, readManifest).filter((fix) => fix.members.some(filter.selects));
+    displayMany({
+        title,
+        notice,
+        duplicatesPackagesMap: filteredPackages,
+        dependents: collectRanges(lock, filteredPackages, readManifest),
+        // the whole lockfile, so the count means the same whatever the filter
+        totalDependencies: Object.keys(packagesMap).length,
+        clusterFixes: matchedClusterFixes,
+        details,
+    });
+    warnWhenNoManifests(stats());
+}
+export function listDuplicates({ filter: filterOptions, details = false, } = {}) {
+    const filter = createPackageFilter(filterOptions);
+    const projectDir = resolvePnpmProjectDir();
+    if (projectDir === null)
+        return;
+    const lock = readPnpmLock(lockPathOf(projectDir));
+    const parsed = parsePnpmLockPackages(lock);
+    const packagesMap = buildPnpmPackagesMap(parsed);
+    const duplicatesPackagesMap = selectPackages(filterDuplicatesPnpmPackagesMap(packagesMap), filter);
+    const { readManifest, stats } = createManifestReaderWithStats(projectDir);
+    displayMany({
+        title: "duplicates",
+        duplicatesPackagesMap,
+        dependents: collectRanges(lock, duplicatesPackagesMap, readManifest),
+        totalDependencies: Object.keys(packagesMap).length,
+        // as in `whyDuplicate`: a family is shown whole as soon as it holds a
+        // selected member, because that is what explains the duplicate
+        clusterFixes: identifyClusterFixes(lock, packagesMap, readManifest).filter((fix) => fix.members.some(filter.selects)),
+        details,
+    });
+    warnWhenNoManifests(stats());
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAK5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,oCAAoC,CAAC;AAE5C;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,KAA0B;IACrD,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,6LAA6L,CAC9L,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,6DAA6D;AAC7D,SAAS,aAAa,CACpB,IAAkB,EAClB,WAAwB,EACxB,YAA4B;IAE5B,OAAO,sBAAsB,CAC3B,IAAI,EACJ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EACjC,YAAY,CACb,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EAAE,aAAa,EACrB,GAAG,GAAG,KAAK,EACX,OAAO,GAAG,KAAK,GACK;IACpB,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EACL,MAAM,GACP,GAAG,uBAAuB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAE1D,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAE1E,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,mBAAmB,GAAG,oBAAoB,CAC9C,IAAI,EACJ,WAAW,EACX,YAAY,CACb,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpD,WAAW,CAAC;QACV,KAAK;QACL,MAAM;QACN,qBAAqB,EAAE,gBAAgB;QACvC,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC;QAC/D,sEAAsE;QACtE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM;QAClD,YAAY,EAAE,mBAAmB;QACjC,OAAO;KACR,CAAC,CAAC;IACH,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/B,CAAC;AAOD,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EAAE,aAAa,EACrB,OAAO,GAAG,KAAK,GAChB,GAA0B,EAAE;IAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,qBAAqB,GAAG,cAAc,CAC1C,+BAA+B,CAAC,WAAW,CAAC,EAC5C,MAAM,CACP,CAAC;IAEF,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAE1E,WAAW,CAAC;QACV,KAAK,EAAE,YAAY;QACnB,qBAAqB;QACrB,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,qBAAqB,EAAE,YAAY,CAAC;QACpE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM;QAClD,sEAAsE;QACtE,+DAA+D;QAC/D,YAAY,EAAE,oBAAoB,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,MAAM,CACxE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAC1C;QACD,OAAO;KACR,CAAC,CAAC;IACH,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/B,CAAC"}

package/dist/pnpmLockTypes.js

@@ -0,0 +1,7 @@
+/**
+ * Minimal subset of the pnpm lockfile v9 structure consumed by this package.
+ *
+ * @see https://github.com/pnpm/spec/blob/master/lockfile/9.0.md
+ */
+export {};
+//# sourceMappingURL=pnpmLockTypes.js.map

package/dist/pnpmLockTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpmLockTypes.js","sourceRoot":"","sources":["../src/pnpmLockTypes.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/readPnpmLock.js

@@ -0,0 +1,6 @@
+import { readFileSync } from "node:fs";
+import { parse } from "yaml";
+export const readPnpmLock = (filepath) => {
+    return parse(readFileSync(filepath, "utf8"));
+};
+//# sourceMappingURL=readPnpmLock.js.map

package/dist/readPnpmLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPnpmLock.js","sourceRoot":"","sources":["../src/readPnpmLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAG7B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAgB,EAAE;IAC7D,OAAO,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;AAC/D,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "pnpm-dedup",
+  "version": "2.1.0",
+  "description": "List duplicates and dedupe pnpm lock file",
+  "keywords": [
+    "dedupe",
+    "duplicate",
+    "pnpm"
+  ],
+  "homepage": "https://github.com/christophehurpeau/pm-tools",
+  "bugs": {
+    "url": "https://github.com/christophehurpeau/pm-tools/issues"
+  },
+  "license": "MIT",
+  "author": "Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/christophehurpeau/pm-tools.git",
+    "directory": "packages/pnpm-dedup"
+  },
+  "bin": {
+    "pnpm-dedup": "./dist/bin/pnpm-dedupe.js",
+    "pnpm-dedupe": "./dist/bin/pnpm-dedupe.js",
+    "pnpm-why-duplicate": "./dist/bin/pnpm-why-duplicate.js"
+  },
+  "files": [
+    "src",
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/definitions/index.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./dist/definitions/index.d.ts",
+      "node": {
+        "import": "./dist/index.js"
+      }
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "lint": "bun run lint:oxlint && bun run lint:eslint",
+    "lint:eslint": "bun run --cwd '../..' eslint --quiet 'packages/pnpm-dedup'",
+    "lint:oxlint": "bun run --cwd '../..' oxlint --quiet 'packages/pnpm-dedup'",
+    "test": "bun run --cwd '../..' test -- 'packages/pnpm-dedup'",
+    "tsc": "tsc"
+  },
+  "dependencies": {
+    "pm-dedup-core": "workspace:*",
+    "semver": "7.8.5",
+    "tslib": "^2.8.1",
+    "yaml": "2.9.1"
+  },
+  "devDependencies": {
+    "@types/bun": "1.4.2",
+    "@typescript/native": "npm:typescript@7.0.2",
+    "typescript": "npm:@typescript/typescript6@6.0.2"
+  },
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "pob": {
+    "bundler": "tsc",
+    "entries": [
+      "index"
+    ]
+  }
+}