🔧 Fix: npm ci not executed when packages are out of sync

Problem

During the theme build process, npm ci was not being executed when new packages were added to package-lock.json in Hyva and TailwindCSS themes. The autoRepair() method only checked if the node_modules directory existed, not whether the installed packages matched the lock file specification.

This could lead to build failures when:

• New dependencies were added to package.json/package-lock.json
• Package versions were updated in the lock file
• node_modules existed but contained outdated or missing packages

Solution

Implemented proper npm synchronization validation using npm ls to detect package state:

1. New isNodeModulesInSync() Method

File: src/Service/NodePackageManager.php

• Added method to check if node_modules is synchronized with package-lock.json
• Uses npm ls --depth=0 --json to validate all packages are installed with correct versions
• Returns false when packages are missing, outdated, or have version mismatches
• Handles edge case where package-lock.json doesn't exist (returns true)

public function isNodeModulesInSync(string $path): bool
{
    if (!$this->fileDriver->isDirectory($path . '/node_modules')) {
        return false;
    }

    if (!$this->fileDriver->isExists($path . '/package-lock.json')) {
        return true;
    }

    $result = $this->shell->execute('npm ls --depth=0 --json', $path);
    return $result->isSuccessful();
}

2. Updated Theme Builders

Files:

• src/Service/ThemeBuilder/HyvaThemes/Builder.php
• src/Service/ThemeBuilder/TailwindCSS/Builder.php