pnpm-workspace.yaml

Rama main · réplica de lectura del repositorio original.

packages:
  - packages/*
  - apps/*
  - apps/vscode/*
  - apps/dotcom/*
  - internal/*
  - templates/*

# Yarn didn't install missing peers; keep the dependency graph identical across the migration.
autoInstallPeers: false

# Deduplicate on every install that writes the lockfile, so adding or changing a dependency
# doesn't need a manual `pnpm dedupe`. When the duplicate is also a peer of another dependency,
# it takes a second `pnpm install`.
autoDedupe: true

# Don't run third-party dependency build/install scripts by default. Packages that genuinely
# need to build are listed under allowBuilds. This closes the postinstall code-execution vector;
# see the note in AGENTS.md.
allowBuilds:
  '@clerk/shared': false
  '@modelcontextprotocol/ext-apps': false
  '@rocicorp/zero-sqlite3': true
  '@sentry/cli': true
  '@swc/core': true
  '@vscode/vsce-sign': true
  core-js: false
  core-js-pure: false
  edgedriver: true
  esbuild: true
  geckodriver: true
  keytar: true
  postinstall-postinstall: false
  protobufjs: false
  sharp: true
  sqlite3: true
  # workerd's postinstall runs the native binary to self-check it, which fails on CI images
  # without GLIBC 2.35+ (e.g. Vercel, which builds the docs site). Skipping it doesn't affect
  # wrangler at dev time.
  workerd: false

# Newly published versions must be at least 7 days old before pnpm will pick them (minutes).
minimumReleaseAge: 10080
# Remove once 1.11.5 clears the gate (2026-11-17T13:52Z).
minimumReleaseAgeExclude:
  - '@rocicorp/zero@1.11.5'

overrides:
  '@types/node': ^22.15.31
  ws: 8.21.0
  js-cookie: 3.0.7
  postcss: 8.5.23
  react-router: 6.30.4
  '@remix-run/router': 1.23.2
  '@octokit/plugin-paginate-rest@11.3.1': 11.4.1
  'undici@7.24.4': 7.28.0
  'ip-address@10.1.0': 10.2.0
  # `ai` pins 1.9.0 and Zero needs ^1.9.1. Two copies split vitest (an optional peer) into two
  # instances, and tests that import the other copy fail inside expect().
  '@opentelemetry/api': 1.9.1

patchedDependencies:
  '@microsoft/tsdoc@0.15.1': patches/@microsoft__tsdoc@0.15.1.patch

# node_modules links into pnpm's shared store instead of cloning ~140k files per checkout, so a
# worktree installs and deletes in seconds. The store has no hidden hoist, so an undeclared import
# only resolves if packageExtensions declares it.
enableGlobalVirtualStore: true

# Link the @types package of a peer dependency next to each package that peer-depends on it, so
# TypeScript finds types such as @types/react from inside the global virtual store.
addMissingPeerTypes: true

packageExtensions:
  # These packages import modules they don't declare.
  '@rocicorp/zero':
    peerDependencies:
      kysely: '*'
    peerDependenciesMeta:
      kysely:
        optional: true
  '@fastify/websocket':
    peerDependencies:
      fastify: '*'
    peerDependenciesMeta:
      fastify:
        optional: true
  algoliasearch-helper:
    peerDependencies:
      '@algolia/client-search': '*'
      '@algolia/recommend': '*'
    peerDependenciesMeta:
      '@algolia/client-search':
        optional: true
      '@algolia/recommend':
        optional: true