Method mergeResolvedFlakeToLockfile

internal/devbox/update.go:233–259

mergeResolvedFlakeToLockfile updates the lockfile entry for a flake ref. It compares on Resolved (which embeds the locked rev) rather than Version since flake refs don't carry a semver. It honors the same LastModified staleness guard as the nixpkgs path.

(
	pkg *devpkg.Package,
	resolved *lock.Package,
	existing *lock.Package,
	lockfile *lock.File,
)

// flake refs don't carry a semver. It honors the same LastModified staleness
// guard as the nixpkgs path.
func (d *Devbox) mergeResolvedFlakeToLockfile(
	pkg *devpkg.Package,
	resolved *lock.Package,
	existing *lock.Package,
	lockfile *lock.File,
) error {
	if existing.Resolved == resolved.Resolved {
		ux.Finfof(d.stderr, "Already up-to-date %s\n", pkg)
		return nil
	}

	// Skip the guard if either side is missing a timestamp — treat unknown as
	// not-older so we don't block a legit update.
	if existing.LastModified != "" && resolved.LastModified != "" &&
		existing.LastModified > resolved.LastModified {
		ux.Fwarningf(
			d.stderr,
			"Resolved ref for %s has older last_modified time. Not updating\n",
			pkg,
		)
		return nil
	}

	ux.Finfof(d.stderr, "Updating %s %s\n", pkg, describeFlakeUpdate(existing, resolved))
	useResolvedPackageInLockfile(lockfile, pkg, resolved, existing)
	return nil
}

// describeFlakeUpdate renders a short human-readable diff between two flake
// lockfile entries. It prefers short revs when both sides have them, falls