@pnpm/building.policy 1100.0.18 → 1100.0.20

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @pnpm/building.policy
 
+## 1100.0.20
+
+### Patch Changes
+
+- `pnpm remove` now prunes undecided entries (`"set this to true or false"`) from `allowBuilds` in `pnpm-workspace.yaml` when `sharedWorkspaceLockfile: true` and the corresponding packages are removed [pnpm/pnpm#13892](https://github.com/pnpm/pnpm/issues/13892).
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.1
+  - @pnpm/deps.path@1101.0.0
+  - @pnpm/types@1102.0.0
+
+## 1100.0.19
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.0
+
 ## 1100.0.18
 
 ### Patch Changes

package/lib/index.d.ts

@@ -1,4 +1,9 @@
 import type { AllowBuild, DepPath } from '@pnpm/types';
+/**
+ * The placeholder value written to `allowBuilds` for a package whose build
+ * was ignored and still awaits an explicit `true`/`false` decision.
+ */
+export declare const UNDECIDED_ALLOW_BUILD = "set this to true or false";
 export declare function isBuildExplicitlyDisallowed(depPath: DepPath, allowBuild?: AllowBuild): boolean;
 export declare function createAllowBuildFunction(opts: {
     dangerouslyAllowAllBuilds?: boolean;
@@ -10,3 +15,11 @@ export declare function createAllowBuildFunction(opts: {
  * git/tarball artifacts, whose name alone must not approve builds.
  */
 export declare function allowBuildKeyFromIgnoredBuild(depPath: DepPath): string;
+/**
+ * The package name an `allowBuilds` key identifies — the key itself for a
+ * bare name, the name half of a `name@version` dep-path key — or
+ * `undefined` for keys carrying no single package name (hashless git-repo
+ * keys, malformed shapes). Cleanup may only drop an entry whose package
+ * this proves absent from a resolved-name index.
+ */
+export declare function packageNameFromAllowBuildKey(key: string): string | undefined;

package/lib/index.js

@@ -1,5 +1,10 @@
 import { expandPackageVersionSpecs } from '@pnpm/config.version-policy';
 import * as dp from '@pnpm/deps.path';
+/**
+ * The placeholder value written to `allowBuilds` for a package whose build
+ * was ignored and still awaits an explicit `true`/`false` decision.
+ */
+export const UNDECIDED_ALLOW_BUILD = 'set this to true or false';
 export function isBuildExplicitlyDisallowed(depPath, allowBuild) {
     return allowBuild?.(depPath) === false;
 }
@@ -87,6 +92,21 @@ export function allowBuildKeyFromIgnoredBuild(depPath) {
         return pkgIdWithPatchHash;
     return parsed.name;
 }
+/**
+ * The package name an `allowBuilds` key identifies — the key itself for a
+ * bare name, the name half of a `name@version` dep-path key — or
+ * `undefined` for keys carrying no single package name (hashless git-repo
+ * keys, malformed shapes). Cleanup may only drop an entry whose package
+ * this proves absent from a resolved-name index.
+ */
+export function packageNameFromAllowBuildKey(key) {
+    if (isGitRepoAllowBuildKey(key))
+        return undefined;
+    const name = key.indexOf('@', 1) === -1 ? key : dp.parse(key).name;
+    if (!name || name.includes(':'))
+        return undefined;
+    return name;
+}
 function addAllowBuildRule(pkg, target) {
     if (isGitRepoAllowBuildKey(pkg)) {
         target.gitRepos.add(pkg);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.policy",
-  "version": "1100.0.18",
+  "version": "1100.0.20",
   "description": "Create a function for filtering out dependencies that are not allowed to be built",
   "keywords": [
     "pnpm",
@@ -27,13 +27,13 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/config.version-policy": "1100.1.12",
-    "@pnpm/deps.path": "1100.1.0",
-    "@pnpm/types": "1101.9.0"
+    "@pnpm/config.version-policy": "1100.2.1",
+    "@pnpm/deps.path": "1101.0.0",
+    "@pnpm/types": "1102.0.0"
   },
   "devDependencies": {
     "@jest/globals": "30.4.1",
-    "@pnpm/building.policy": "1100.0.18"
+    "@pnpm/building.policy": "1100.0.20"
   },
   "engines": {
     "node": ">=22.13"