fix(pnpm): url and git package specifiers

e2e/pnpm_lockfiles/.bazelignore

@@ -1,4 +1,5 @@
 node_modules/
+cases/node_modules
 projects/a/node_modules
 projects/b/node_modules
 projects/c/node_modules

e2e/pnpm_lockfiles/MODULE.bazel

@@ -4,13 +4,19 @@ local_path_override(
     path = "../..",
 )
 
+# The same primary lockfile across all versions
 PNPM_LOCK_VERSIONS = [
     "v54",
     "v60",
     "v61",
     "v90",
 ]
 
+# Lockfiles with unique test cases
+PNPM_LOCK_TEST_CASES = [
+    "tarball-no-url-v54.yaml",
+]
+
 bazel_dep(name = "aspect_bazel_lib", version = "2.7.6")
 
 bazel_dep(name = "bazel_skylib", version = "1.5.0", dev_dependency = True)
@@ -62,3 +68,20 @@ npm = use_extension(
     )
     for version in PNPM_LOCK_VERSIONS
 ]
+
+[
+    npm.npm_translate_lock(
+        name = lockfile.replace(".yaml", ""),
+        pnpm_lock = "//cases:%s" % lockfile,
+        verify_node_modules_ignored = "//:.bazelignore",
+    )
+    for lockfile in PNPM_LOCK_TEST_CASES
+]
+
+[
+    use_repo(
+        npm,
+        lockfile.replace(".yaml", ""),
+    )
+    for lockfile in PNPM_LOCK_TEST_CASES
+]

e2e/pnpm_lockfiles/README.md

@@ -2,16 +2,14 @@
 
 TODO:
 
--   http references: `"hello": "https://gitpkg.vercel.app/EqualMa/gitpkg-hello/packages/hello"`
-
-    Has inconsistencies across pnpm lockfile versions, issues with pnpm9
-
--   file references: `"@scoped/c": "file:../projects/c"`
-
-    Has inconsistencies across pnpm lockfile versions, issues with pnpm9
-
 -   npm: references: `@aspect-test/a2": "npm:@aspect-test/a"`
 
     No :node_modules/\* targets are generated for aliases to npm packages.
 
     Note: _sometimes_ fails to install with pnpm9
+
+## pnpm lockfile edge cases
+
+Unique test cases hard to cover with normal pnpm workspaces + package.json. Each
+test case is a pnpm-lock.yaml with a unique filename, see cases/BUILD for how the test
+cases run on each of those lockfiles.

e2e/pnpm_lockfiles/WORKSPACE

@@ -3,13 +3,19 @@ local_repository(
     path = "../..",
 )
 
+# The same primary lockfile across all versions
 PNPM_LOCK_VERSIONS = [
     "v54",
     "v60",
     "v61",
     "v90",
 ]
 
+# Lockfiles with unique test cases
+PNPM_LOCK_TEST_CASES = [
+    "tarball-no-url-v54.yaml",
+]
+
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
 
 rules_js_dependencies()
@@ -45,3 +51,16 @@ npm_repositories_v60()
 npm_repositories_v61()
 
 npm_repositories_v90()
+
+[
+    npm_translate_lock(
+        name = lockfile.replace(".yaml", ""),
+        pnpm_lock = "//cases:%s" % lockfile,
+        verify_node_modules_ignored = "//:.bazelignore",
+    )
+    for lockfile in PNPM_LOCK_TEST_CASES
+]
+
+load("@tarball-no-url-v54//:repositories.bzl", npm_repositories_tarball_no_url_v54 = "npm_repositories")
+
+npm_repositories_tarball_no_url_v54()

e2e/pnpm_lockfiles/base/package.json

@@ -3,6 +3,9 @@
     "private": true,
     "dependencies": {
         "@aspect-test/a": "^5.0.2",
+        "debug": "ngokevin/debug#9742c5f383a6f8046241920156236ade8ec30d53",
+        "hello": "https://gitpkg.vercel.app/EqualMa/gitpkg-hello/packages/hello",
+        "jsonify": "https://github.com/aspect-build/test-packages/releases/download/0.0.0/@foo-jsonify-0.0.0.tgz",
         "rollup": "3.2.5",
         "meaning-of-life": "1.0.0",
         "uvu": "0.5.6",

e2e/pnpm_lockfiles/cases/BUILD.bazel

@@ -0,0 +1,14 @@
+load("@bazel_skylib//rules:build_test.bzl", "build_test")
+load("@tarball-no-url-v54//:defs.bzl", tarball_no_url_link_all = "npm_link_all_packages")
+
+tarball_no_url_link_all(name = "tarball-no-url-v54-modules")
+
+build_test(
+    name = "tarball-no-url-v54",
+    targets = [
+        ":tarball-no-url-v54-modules",
+        ":tarball-no-url-v54-modules/@aspect-build/a",
+    ],
+)
+
+exports_files(glob(["*.yaml"]))

e2e/pnpm_lockfiles/cases/package.json

@@ -0,0 +1 @@
+{}

e2e/pnpm_lockfiles/cases/pnpm-workspace.yaml

@@ -0,0 +1,2 @@
+packages:
+    - '.'

e2e/pnpm_lockfiles/cases/tarball-no-url-v54.yaml

@@ -0,0 +1,19 @@
+lockfileVersion: 5.4
+
+importers:
+    .:
+        specifiers:
+            '@aspect-build/a': 1.0.0
+        dependencies:
+            '@aspect-build/a': 1.0.0
+
+packages:
+    # This was found in https://github.com/aspect-build/rules_js/blob/795138561e878c09f0b62a25572358d64960d732/e2e/npm_translate_lock_auth/pnpm-lock.yaml
+    /@aspect-build/a/1.0.0:
+        resolution:
+            {
+                integrity: sha512-MYeL/yqAPYJXOnnSEOAdtQSu/8tiifFtKN6Jg/rgpKRqxKL8NVsQXrX9H2dlJ4mS23pu7VS0+i9mZNiRoCUYwg==,
+                tarball: '@aspect-test/a/-/a-1.0.0.tgz',
+            }
+        hasBin: true
+        dev: false

e2e/pnpm_lockfiles/lockfile-test.bzl

@@ -77,9 +77,23 @@ def lockfile_test(name = None):
             # link:, workspace:, file:, ./rel/path
             ":node_modules/@scoped/a",
             ":node_modules/@scoped/b",
-            # ":node_modules/@scoped/c", TODO: see README
+            ":node_modules/@scoped/c",
             ":node_modules/@scoped/d",
 
+            # http:
+            ":node_modules/debug",
+            # TODO: differs across lockfile versions
+            ":.aspect_rules_js/node_modules/{}".format("[email protected]+ngokevin+debug+tar.gz+9742c5f383a6f8046241920156236ade8ec30d53" if lock_version == "v90" else "[email protected]+ngokevin+debug+9742c5f383a6f8046241920156236ade8ec30d53"),
+
+            # http: with some '@'s in the name + url/version
+            ":node_modules/jsonify",
+
+            # repo#hash
+            # (no protocol, assumed to be github repo + hash):
+            ":node_modules/hello",
+            # TODO: differs across lockfile versions
+            ":.aspect_rules_js/node_modules/{}".format("[email protected]+EqualMa+gitpkg-hello+packages+hello" if lock_version == "v90" else "@gitpkg.vercel.app+EqualMa+gitpkg-hello+packages+hello"),
+
             # npm:
             # ":node_modules/@aspect-test/c2",