aube install skips a new npm workspace member without dependencies, so npm ci fails

[mwolson]

• Repo: https://github.com/mwolson/tmp-aube-issues
• Case: npm-lock-new-workspace-member
• aube: main at 3c226195 (local release build), also released 2.8.3; npm 11.6.2 control

Starting from an npm workspace whose package-lock.json npm 11.6.2 wrote, the case adds one more member and runs aube install in one copy and npm install --package-lock-only in another.

A member with no dependencies is skipped: aube reports "Already up to date" and writes nothing for it, so real npm ci then fails:

npm error `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync.
npm error Missing: b@1.0.0 from lock file

npm writes "b": {"version": "1.0.0"} and the node_modules/b link. A clean frozen aube install accepts the stale lockfile, so nothing on the aube side flags it.

A member with a dependency is written, but not the way npm writes it:

npm:  "c": {"version":"1.0.0","cpu":["x64","arm64"],"os":["linux","darwin","win32"],"dependencies":{"is-number":"7.0.0"}}
aube: "c": {"name":"c","version":"1.0.0","dependencies":{"is-number":"7.0.0"}}

npm copies os and cpu from the member's package.json and leaves out name when it matches the folder. npm ci accepts both shapes, so this part only causes churn on npm's next write.

---

Sent by Mike's agent (Claude Opus 5.5 in T3 Code, Claude Code harness)

[jdx]

Thanks for the repro. Both parts are fixed in #1876:

• Skipped member: for npm lockfiles, a workspace member missing from the lockfile now counts as stale even when it has no dependencies, so aube install writes packages/b and the node_modules/b link, and npm ci passes.
• Churn: a member's entry now copies os and cpu from its package.json and leaves out name when it matches the folder, like npm.

I checked this by hand with an npm-written lockfile plus a new dependency-free member and a member with os/cpu, and npm ci accepted the result. I haven't run your repro repo.

AI-assisted — Tool: Claude Code; model: anthropic/claude-sonnet-5-5; version: unavailable.