@effected/pnpm-plugin-effect 0.6.11 → 0.6.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +17 -1
  2. package/index.js +1 -1
  3. package/package.json +1 -1
  4. package/pnpmfile.cjs +11 -11
  5. package/pnpmfile.mjs +11 -11
package/README.md CHANGED
@@ -38,13 +38,29 @@ pnpm add --config @effected/pnpm-plugin-effect
38
38
 
39
39
  Requires pnpm 11 or newer, and Node.js >=24.11.0. There is no npm or yarn equivalent: config dependencies and catalogs are pnpm features.
40
40
 
41
- The command writes the package into your `pnpm-workspace.yaml`, filling in the version and the required integrity hash for you:
41
+ The command writes the package into your `pnpm-workspace.yaml`:
42
42
 
43
43
  ```yaml
44
44
  configDependencies:
45
45
  "@effected/pnpm-plugin-effect": <version>+sha512-...
46
46
  ```
47
47
 
48
+ **Check that file afterwards, and expect to fix it by hand.** On pnpm 11.24.0 `pnpm add --config` writes the new entry **without** an integrity hash, and strips the `+sha512-…` suffix from every *other* config dependency already listed — including ones the command had no reason to touch. A later `pnpm install` does not restore them. Config dependencies are installed ahead of everything else and can contribute hooks that run during install, so the integrity pin is the thing standing between you and an unverified package with that reach.
49
+
50
+ Hand-written hashes are accepted and preserved, so the fix is to put them back:
51
+
52
+ ```yaml
53
+ configDependencies:
54
+ "@effected/pnpm-plugin-effect": 0.6.11+sha512-...
55
+ "@your-org/other-config-dep": 1.2.3+sha512-... # restore this one too
56
+ ```
57
+
58
+ You can read the correct hash for a version out of the registry:
59
+
60
+ ```bash
61
+ npm view "@effected/pnpm-plugin-effect@<version>" dist.integrity
62
+ ```
63
+
48
64
  ## Usage
49
65
 
50
66
  Once installed, all four catalogs are available to every package in the workspace. Reference them from `package.json` by name, in place of a version range. Which field they go in depends on whether you are building an application or a library.
package/index.js CHANGED
@@ -77,7 +77,7 @@ const catalogs = /* @__PURE__ */ new Map([
77
77
  ["@effected/memfs", "^0.5.0"],
78
78
  ["@effected/npm", "^0.12.1"],
79
79
  ["@effected/package-json", "^0.13.0"],
80
- ["@effected/runtimes", "^0.4.3"],
80
+ ["@effected/runtimes", "^0.4.4"],
81
81
  ["@effected/sbom", "^0.4.4"],
82
82
  ["@effected/schema-org", "^0.1.0"],
83
83
  ["@effected/schemastore", "^0.4.0"],
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@effected/pnpm-plugin-effect",
3
- "version": "0.6.11",
3
+ "version": "0.6.13",
4
4
  "private": false,
5
5
  "description": "pnpm config dependency for centralized catalog management across the Effected ecosystem.",
6
6
  "keywords": [
package/pnpmfile.cjs CHANGED
@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
2
2
  let node_fs = require("node:fs");
3
3
  let node_path = require("node:path");
4
4
 
5
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/ctx.js
5
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/ctx.js
6
6
  /**
7
7
  * Resolve the consuming repo's root package name. Prefers pnpm's
8
8
  * `rootProjectManifest.name`, falling back to reading `package.json` from the
@@ -37,7 +37,7 @@ function excludeByRepo(merged, ctx, byRepo) {
37
37
  }
38
38
 
39
39
  //#endregion
40
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/enforcement.js
40
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/enforcement.js
41
41
  /**
42
42
  * Thrown when an `error`-enforced field diverges. A zero-dependency plain
43
43
  * `Error` subclass (NOT an Effect type) so it survives in the bundled pnpmfile.
@@ -72,7 +72,7 @@ function applyEnforcement(field, result, enforcement) {
72
72
  }
73
73
 
74
74
  //#endregion
75
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/arrays.js
75
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/arrays.js
76
76
  function unionSort(managed, local) {
77
77
  const set = new Set(managed);
78
78
  for (const item of local ?? []) set.add(item);
@@ -108,7 +108,7 @@ const arrayRecordUnion = (base, local) => {
108
108
  };
109
109
 
110
110
  //#endregion
111
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/catalogs.js
111
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/catalogs.js
112
112
  /**
113
113
  * Merge each named catalog; child wins per package. Emits override divergences
114
114
  * when a local version differs from the managed one.
@@ -143,7 +143,7 @@ const catalogs = (base, local) => {
143
143
  };
144
144
 
145
145
  //#endregion
146
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/maps.js
146
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/maps.js
147
147
  /**
148
148
  * `{...managed, ...child}` — child wins per key. Quiet. Merges two maps,
149
149
  * preferring child values.
@@ -188,7 +188,7 @@ const allowBuilds = (base, local) => {
188
188
  };
189
189
 
190
190
  //#endregion
191
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/overrides.js
191
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/overrides.js
192
192
  function mergeMapDetect(prefix, managed, child) {
193
193
  const merged = { ...managed };
194
194
  const divergences = [];
@@ -244,7 +244,7 @@ const peerDependencyRules = (base, local) => {
244
244
  };
245
245
 
246
246
  //#endregion
247
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/scalar.js
247
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/scalar.js
248
248
  /**
249
249
  * `child ?? base` — quiet (no divergences). Prefer local, fall back to managed.
250
250
  *
@@ -300,7 +300,7 @@ const securityMin = (base, local) => {
300
300
  };
301
301
 
302
302
  //#endregion
303
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/table.js
303
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/table.js
304
304
  /**
305
305
  * Built-in strategies keyed by manifest name.
306
306
  *
@@ -320,7 +320,7 @@ const STRATEGY_TABLE = {
320
320
  };
321
321
 
322
322
  //#endregion
323
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/warnings.js
323
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/warnings.js
324
324
  const WARNING_BOX_WIDTH = 75;
325
325
  function pad(line) {
326
326
  return `│${line}${" ".repeat(Math.max(0, WARNING_BOX_WIDTH - line.length - 2))}│`;
@@ -380,7 +380,7 @@ function formatSecurityWarning(divergences, name) {
380
380
  }
381
381
 
382
382
  //#endregion
383
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime.js
383
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime.js
384
384
  /**
385
385
  * Build the pnpm hooks from frozen base data + a field→strategy manifest.
386
386
  * Zero dependencies — bundled verbatim into the shipped pnpmfile.
@@ -508,7 +508,7 @@ const hooks = createHooks({
508
508
  "@effected/memfs": "^0.5.0",
509
509
  "@effected/npm": "^0.12.1",
510
510
  "@effected/package-json": "^0.13.0",
511
- "@effected/runtimes": "^0.4.3",
511
+ "@effected/runtimes": "^0.4.4",
512
512
  "@effected/sbom": "^0.4.4",
513
513
  "@effected/schema-org": "^0.1.0",
514
514
  "@effected/schemastore": "^0.4.0",
package/pnpmfile.mjs CHANGED
@@ -1,7 +1,7 @@
1
1
  import { readFileSync } from "node:fs";
2
2
  import { join } from "node:path";
3
3
 
4
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/ctx.js
4
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/ctx.js
5
5
  /**
6
6
  * Resolve the consuming repo's root package name. Prefers pnpm's
7
7
  * `rootProjectManifest.name`, falling back to reading `package.json` from the
@@ -36,7 +36,7 @@ function excludeByRepo(merged, ctx, byRepo) {
36
36
  }
37
37
 
38
38
  //#endregion
39
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/enforcement.js
39
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/enforcement.js
40
40
  /**
41
41
  * Thrown when an `error`-enforced field diverges. A zero-dependency plain
42
42
  * `Error` subclass (NOT an Effect type) so it survives in the bundled pnpmfile.
@@ -71,7 +71,7 @@ function applyEnforcement(field, result, enforcement) {
71
71
  }
72
72
 
73
73
  //#endregion
74
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/arrays.js
74
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/arrays.js
75
75
  function unionSort(managed, local) {
76
76
  const set = new Set(managed);
77
77
  for (const item of local ?? []) set.add(item);
@@ -107,7 +107,7 @@ const arrayRecordUnion = (base, local) => {
107
107
  };
108
108
 
109
109
  //#endregion
110
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/catalogs.js
110
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/catalogs.js
111
111
  /**
112
112
  * Merge each named catalog; child wins per package. Emits override divergences
113
113
  * when a local version differs from the managed one.
@@ -142,7 +142,7 @@ const catalogs = (base, local) => {
142
142
  };
143
143
 
144
144
  //#endregion
145
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/maps.js
145
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/maps.js
146
146
  /**
147
147
  * `{...managed, ...child}` — child wins per key. Quiet. Merges two maps,
148
148
  * preferring child values.
@@ -187,7 +187,7 @@ const allowBuilds = (base, local) => {
187
187
  };
188
188
 
189
189
  //#endregion
190
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/overrides.js
190
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/overrides.js
191
191
  function mergeMapDetect(prefix, managed, child) {
192
192
  const merged = { ...managed };
193
193
  const divergences = [];
@@ -243,7 +243,7 @@ const peerDependencyRules = (base, local) => {
243
243
  };
244
244
 
245
245
  //#endregion
246
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/scalar.js
246
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/scalar.js
247
247
  /**
248
248
  * `child ?? base` — quiet (no divergences). Prefer local, fall back to managed.
249
249
  *
@@ -299,7 +299,7 @@ const securityMin = (base, local) => {
299
299
  };
300
300
 
301
301
  //#endregion
302
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/table.js
302
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/strategies/table.js
303
303
  /**
304
304
  * Built-in strategies keyed by manifest name.
305
305
  *
@@ -319,7 +319,7 @@ const STRATEGY_TABLE = {
319
319
  };
320
320
 
321
321
  //#endregion
322
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/warnings.js
322
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime/warnings.js
323
323
  const WARNING_BOX_WIDTH = 75;
324
324
  function pad(line) {
325
325
  return `│${line}${" ".repeat(Math.max(0, WARNING_BOX_WIDTH - line.length - 2))}│`;
@@ -379,7 +379,7 @@ function formatSecurityWarning(divergences, name) {
379
379
  }
380
380
 
381
381
  //#endregion
382
- //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.7_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime.js
382
+ //#region ../../node_modules/.pnpm/rolldown-pnpm-config@0.7.8_@effected+jsonc@0.8.0_effect@4.0.0-rc.109__@types+react@19.2.18_redis@6.2.1_rolldown@1.2.5/node_modules/rolldown-pnpm-config/runtime.js
383
383
  /**
384
384
  * Build the pnpm hooks from frozen base data + a field→strategy manifest.
385
385
  * Zero dependencies — bundled verbatim into the shipped pnpmfile.
@@ -507,7 +507,7 @@ const hooks = createHooks({
507
507
  "@effected/memfs": "^0.5.0",
508
508
  "@effected/npm": "^0.12.1",
509
509
  "@effected/package-json": "^0.13.0",
510
- "@effected/runtimes": "^0.4.3",
510
+ "@effected/runtimes": "^0.4.4",
511
511
  "@effected/sbom": "^0.4.4",
512
512
  "@effected/schema-org": "^0.1.0",
513
513
  "@effected/schemastore": "^0.4.0",