Fix: Refuse git dependencies in Yarn classic lock inventory

Yarn classic was incorrectly treating git HTTPS URLs (like
https://github.com/user/repo.git#<commit>) as verifiable registry
entries. This caused them to be deferred to the patch service instead
of being refused as git dependencies that don't have registry artifacts.

The fix:
1. Modified http_url() to reject URLs ending in .git (git repositories)
2. Updated Yarn classic to clear integrity when resolved is None due to
   a non-HTTP URL, matching npm's behavior and preventing standalone
   integrity fields on git+ blocks from being kept

This prevents the service from installing npm-registry artifacts over
git dependencies that the lock does not describe.

Bug-Id: 3120e866-8986-4a9f-8d7e-78b8eae543b4

Author: cursoragent

crates/socket-patch-core/src/vendor/lock_inventory/mod.rs

@@ -65,8 +65,8 @@ pub(crate) mod npm_family;
 pub(crate) mod pnpm;
 pub(crate) mod pypi;
 pub(crate) mod recover;
-pub(crate) mod vlt;
 pub mod view;
+pub(crate) mod vlt;
 pub(crate) mod wired;
 pub(crate) mod yarn;
 
@@ -365,7 +365,16 @@ fn dedup_prefer_integrity(raw: Vec<LockfileEntry>) -> Vec<LockfileEntry> {
 /// cannot reproduce; such entries stay listed for discovery but the fetch
 /// layer's integrity rule decides fetchability).
 fn http_url(raw: &str) -> Option<String> {
-    (raw.starts_with("https://") || raw.starts_with("http://")).then(|| raw.to_string())
+    if !(raw.starts_with("https://") || raw.starts_with("http://")) {
+        return None;
+    }
+    // A `.git` suffix (with or without a `#fragment`) is a git repository,
+    // not a tarball artifact the registry conventions serve.
+    let before_fragment = raw.split('#').next().unwrap();
+    if before_fragment.ends_with(".git") {
+        return None;
+    }
+    Some(raw.to_string())
 }
 
 /// ARCHITECTURE GUARD (module docs): each per-format file is laid out as

crates/socket-patch-core/src/vendor/lock_inventory/tests.rs

@@ -907,6 +907,35 @@ async fn yarn_classic_git_resolution_fragment_is_not_an_integrity() {
     assert_eq!(e.integrity, LockIntegrity::None);
 }
 
+/// An https URL ending in `.git` is a git repository, not a registry
+/// tarball: the `#<commit>` fragment is not a tarball sha1, and a
+/// standalone integrity field verifies nothing the registry serves.
+#[tokio::test]
+async fn yarn_classic_dot_git_https_url_is_not_a_registry_entry() {
+    let tmp = tempfile::tempdir().unwrap();
+    write(
+        tmp.path(),
+        "yarn.lock",
+        "# yarn lockfile v1\n\n\
+         \"https-git@1.0.0\":\n\
+         \x20 version \"1.0.0\"\n\
+         \x20 resolved \"https://github.com/o/https-git.git#0123456789abcdef0123456789abcdef01234567\"\n\
+         \n\
+         \"with-integrity@git+https://example.com/with-integrity.git\":\n\
+         \x20 version \"2.0.0\"\n\
+         \x20 resolved \"git+https://example.com/with-integrity.git#abc\"\n\
+         \x20 integrity sha512-standaloneIntegrity==\"\n",
+    )
+    .await;
+    let (_, entries) = inventory_npm_lock(tmp.path()).await.unwrap().unwrap();
+    let e1 = entry(&entries, "https-git");
+    assert_eq!(e1.resolved, None);
+    assert_eq!(e1.integrity, LockIntegrity::None);
+    let e2 = entry(&entries, "with-integrity");
+    assert_eq!(e2.resolved, None);
+    assert_eq!(e2.integrity, LockIntegrity::None);
+}
+
 // ── yarn berry ────────────────────────────────────────────────────────
 
 const YARN_BERRY: &str = "# This file is generated by running \"yarn install\" inside your project.

crates/socket-patch-core/src/vendor/lock_inventory/yarn.rs

@@ -141,7 +141,8 @@ fn classic_registry_view(text: &str) -> Vec<LockfileEntry> {
         // `resolved "url#sha1hex"` — the fragment is the legacy verifier of
         // a registry tarball. A git resolution's fragment is a commit id,
         // which verifies nothing a registry fetch could download.
-        let (resolved, sha1_hex) = match classic_field(&block.lines, "resolved") {
+        let resolved_raw = classic_field(&block.lines, "resolved");
+        let (resolved, sha1_hex) = match resolved_raw {
             Some(raw) => {
                 let (url, sha1) = split_resolved_sha1(raw);
                 match http_url(url) {
@@ -151,10 +152,16 @@ fn classic_registry_view(text: &str) -> Vec<LockfileEntry> {
             }
             None => (None, None),
         };
-        let integrity = classic_field(&block.lines, "integrity")
-            .map(|i| LockIntegrity::Sri(i.to_string()))
-            .or(sha1_hex.map(LockIntegrity::Sha1Hex))
-            .unwrap_or(LockIntegrity::None);
+        // A non-registry resolution (`file:`, `git+…`, `.git`) records the
+        // integrity of an artifact no registry serves: nothing a registry
+        // fetch could verify against.
+        let integrity = match (&resolved, resolved_raw) {
+            (None, Some(_)) => LockIntegrity::None,
+            _ => classic_field(&block.lines, "integrity")
+                .map(|i| LockIntegrity::Sri(i.to_string()))
+                .or(sha1_hex.map(LockIntegrity::Sha1Hex))
+                .unwrap_or(LockIntegrity::None),
+        };
         out.push(LockfileEntry::npm(name, version, resolved, integrity));
     }
     out