Ensure lockfile is invalid if repo not present in config anymore

[Keats]

Closes #112

[dpastoor]

@wes-a2ai could you add an e2e test for this for us to formally test before we merge this

[wes-a2ai]

I think I'm struggling to understand what/how this PR is trying to address #112 and how to test. Even when I'm just running manually and changing my repository snapshot dates, I am still getting the packages are being sourced from the original repository.

Original config:

[project]
name = "simple"
r_version = "4.4"
repositories = [ {alias = "posit", url = "https://packagemanager.posit.co/cran/2024-12-16/"} ]
dependencies = [ "dplyr", ]

Results (expected):

$ cargo run --features=cli -- -c example_projects/simple/rproject.toml sync
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.10s
     Running `target/debug/rv -c example_projects/simple/rproject.toml sync`
+ cli (3.6.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 1ms
+ dplyr (1.1.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ fansi (1.0.6, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ generics (0.1.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ glue (1.8.0, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ lifecycle (1.0.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ magrittr (2.0.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ pillar (1.9.0, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ pkgconfig (2.0.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 1ms
+ R6 (2.5.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ rlang (1.1.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ tibble (3.2.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ tidyselect (1.2.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ utf8 (1.2.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ vctrs (0.6.5, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ withr (3.0.2, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms

Remove library:

$ rm -rf example_projects/simple/rv

Changed config:

[project]
name = "simple"
r_version = "4.4"
repositories = [ {alias = "posit", url = "https://packagemanager.posit.co/cran/2024-12-18/"} ]
dependencies = [ "dplyr", ]

Results:

$ cargo run --features=cli -- -c example_projects/simple/rproject.toml sync
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.08s
     Running `target/debug/rv -c example_projects/simple/rproject.toml sync`
+ cli (3.6.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 1ms
+ dplyr (1.1.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ fansi (1.0.6, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ generics (0.1.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ glue (1.8.0, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ lifecycle (1.0.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ magrittr (2.0.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ pillar (1.9.0, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ pkgconfig (2.0.3, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ R6 (2.5.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ rlang (1.1.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ tibble (3.2.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ tidyselect (1.2.1, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ utf8 (1.2.4, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ vctrs (0.6.5, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms
+ withr (3.0.2, binary from https://packagemanager.posit.co/cran/2024-12-16) in 0ms

[Keats]

I forgot to invalidate the deps in the resolution as well, that should work now

[wes-a2ai]

config

[project]
name = "rv-test"
r_version = "4.4"

# any CRAN-type repository, order matters. Additional ability to force source package installation
# Example: {alias = "CRAN", url = "https://cran.r-project.org", force_source = true}
repositories = [
    {alias = "repo1", url = "https://a2-ai.github.io/rv-test-repo/repo1"},
    {alias = "RSPM", url = "https://packagemanager.posit.co/cran/2025-04-12"},
]

# package to install and any specifications. Any descriptive dependency can have the `install_suggestions` specification
# Examples:
    # "dplyr",
    # {name = "dplyr", repository = "CRAN", force_source = true},
    # {name = "dplyr", git = "https://github.com/tidyverse/dplyr.git", tag = "v1.1.4"},
    # {name = "dplyr", path = "/path/to/local/dplyr"},
dependencies = [
    "rv.git.pkgA",
    "R6",
]

$ rv sync
+ rv.git.pkgA (0.0.5, source from https://a2-ai.github.io/rv-test-repo/repo1) in 2891ms
+ R6 (2.6.1, binary from https://packagemanager.posit.co/cran/2025-04-12) in 14ms
$ vim rproject.toml # replaced repo1 with repo2
$ rv sync
- rv.git.pkgA
+ rv.git.pkgA (0.0.4, source from https://a2-ai.github.io/rv-test-repo/repo2) in 1ms