@pipelab/core-node 1.0.1-latest.44 → 1.0.1-latest.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pipelab/core-node",
-  "version": "1.0.1-latest.44",
+  "version": "1.0.1-latest.45",
   "private": false,
   "description": "The Pipelab automation engine for Node.js",
   "license": "FSL-1.1-MIT",
@@ -39,8 +39,8 @@
     "type-fest": "4.39.0",
     "ws": "8.18.3",
     "yauzl": "2.10.0",
-    "@pipelab/constants": "1.0.1-latest.40",
-    "@pipelab/shared": "2.0.1-latest.41"
+    "@pipelab/constants": "1.0.1-latest.41",
+    "@pipelab/shared": "2.0.1-latest.42"
   },
   "devDependencies": {
     "@types/adm-zip": "0.5.7",
@@ -53,7 +53,7 @@
     "@types/yauzl": "2.10.3",
     "tsdown": "0.21.2",
     "typescript": "^5.0.0",
-    "@pipelab/tsconfig": "1.0.1-latest.40"
+    "@pipelab/tsconfig": "1.0.1-latest.41"
   },
   "scripts": {
     "build": "tsdown",

package/src/utils/remote.ts

@@ -109,41 +109,6 @@ export async function fetchPackage(
   }
 
   const cachePath = join(ctx.userDataPath, "cache", "pacote");
-
-  // 1. Resolve version/range using npm with session-wide memoization and disk cache
-  try {
-    let packumentPromise = packumentRequests.get(packageName);
-    if (!packumentPromise) {
-      packumentPromise = pacote.packument(packageName, { cache: cachePath });
-      packumentRequests.set(packageName, packumentPromise);
-    }
-
-    const packument = await packumentPromise;
-    const versions = Object.keys(packument.versions);
-    const range = versionOrRange || "latest";
-
-    // Prioritize tags (like 'latest', 'beta', etc.) over semver ranges
-    const foundVersion = packument["dist-tags"]?.[range] || semver.maxSatisfying(versions, range);
-
-    if (!foundVersion) {
-      throw new Error(
-        `Package ${packageName}@${range} not found on npm (available tags: ${Object.keys(
-          packument["dist-tags"] || {},
-        ).join(", ")})`,
-      );
-    }
-    resolvedVersion = foundVersion;
-    console.log(`[Fetcher] ${packageName}: Resolved to v${resolvedVersion} via npm`);
-  } catch (error) {
-    console.warn(`[Fetcher] ${packageName}: remote resolution failed, trying local fallback...`);
-    const fallbackVersion = await tryLocalFallback(versionOrRange, error, baseDir, packageName);
-    if (fallbackVersion) {
-      resolvedVersion = fallbackVersion;
-    } else {
-      throw error;
-    }
-  }
-
   const packageDir = join(baseDir, resolvedVersion);
 
   // If the package already exists and we don't need to install dependencies, return immediately
@@ -185,7 +150,7 @@ export async function runPnpm(
   },
 ) {
   const {
-    args = ["install", "--prod", "--no-lockfile", "--prefer-offline"],
+    args = ["install", "--prod", "--no-lockfile", "--prefer-offline", "--no-verify-store-integrity"],
     extraEnv = {},
     signal,
     context: ctx,
@@ -209,6 +174,7 @@ export async function runPnpm(
       NODE_ENV: "production",
       PATH: nodePath ? `${dirname(nodePath)}${delimiter}${process.env.PATH}` : process.env.PATH,
       PNPM_HOME: join(ctx.userDataPath, "pnpm"),
+      PNPM_ONLY_ALLOW_TRUSTED_DEPENDENCIES: "false",
       ...extraEnv,
     },
   });