Function classifyPathLocalBinCandidate

packages/cli-exec/src/lookup.ts:574–601

* Classifies a concrete PATH hit after command lookup. This catches local * `node_modules/.bin` entries that arrived from the user's PATH instead of the * trusted local-bin discovery phase above.

(
  filePath: string,
  localBinDirectories: string[]
)

 * trusted local-bin discovery phase above.
 */
async function classifyPathLocalBinCandidate(
  filePath: string,
  localBinDirectories: string[]
): Promise<PathLocalBinCandidate> {
  const localBinDirectory = await getLocalBinDirectory(
    filePath,
    localBinDirectories
  );

  if (localBinDirectory) {
    return { directory: localBinDirectory };
  }

  const nodeModulesBinDirectory = await getNodeModulesBinDirectory(filePath);

  if (!nodeModulesBinDirectory) {
    return null;
  }

  const nodeModulesDirectory = path.dirname(nodeModulesBinDirectory);
  const skippedReason = await getSkippedNodeModulesReason(nodeModulesDirectory);

  if (skippedReason) {
    return { reason: `local node_modules is ${skippedReason}` };
  }

  return { reason: 'local bin is outside project lookup boundary' };
}

/**
 * Validates that a local bin resolves to the installed `vercel` package bin.