Bun lock install links workspace dependency to workspace root instead of package directory

[mwolson]

I can reproduce this with aube 1.13.1 linux-x64 (2026-05-14).

• Repo: https://github.com/mwolson/tmp-aube-issues
• Case: bun-workspace-link

Steps:

cd bun-workspace-link
./repro.sh

Expected:

• packages/app depends on @repro/contracts via workspace:*.
• After aube install --frozen-lockfile from Bun's text bun.lock, packages/app/node_modules/@repro/contracts should point to packages/contracts.

Actual:

• packages/app/node_modules/@repro/contracts points to the workspace root.

In the larger project where I found this, the same behavior causes TypeScript to fail resolving exports from the workspace dependency. Real Bun links the same dependency to packages/contracts.

[jdx]

Thanks for the concise repro. I reproduced the bad symlink target and opened a fix in #696.

Root cause: Bun writes workspace package entries as workspace:packages/..., and Aube was treating that tail like a range selector instead of a root-relative workspace path, so the linker ended up targeting the workspace root.

Validation done on the PR:

• cargo fmt --check
• cargo test -p aube-lockfile bun::tests::test_parse_bun_workspace_package_path_as_link_target
• mise run test:bats test/import.bats --filter 'bun.lock links workspace deps'\n- your bun-workspace-link ./repro.sh, which now passes and links to packages/contracts\n\nThis comment was generated by Codex.

[mwolson]

Thanks, it's fixed in aube 1.14.1