@pnpm/resolving.local-resolver 1101.1.19 → 1101.2.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @pnpm/local-resolver
 
+## 1101.2.0
+
+### Minor Changes
+
+- `catalogMode` and `--save-catalog` no longer move a local path, tarball, or `workspace:<path>` specifier into a catalog. Such a specifier is resolved against the project that declares it, so one catalog entry cannot mean the same directory for every project that references it [#14437](https://github.com/pnpm/pnpm/issues/14437).
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/error@1100.1.4
+  - @pnpm/workspace.project-manifest-reader@1100.0.27
+
+## 1101.1.20
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/crypto.hash@1100.0.3
+  - @pnpm/resolving.resolver-base@1101.2.0
+  - @pnpm/types@1102.1.0
+  - @pnpm/workspace.project-manifest-reader@1100.0.26
+
 ## 1101.1.19
 
 ### Patch Changes

package/lib/index.d.ts

@@ -1,7 +1,7 @@
 import type { DirectoryResolution, LatestInfo, LatestQuery, Resolution, ResolveResult, TarballResolution } from '@pnpm/resolving.resolver-base';
 import type { DependencyManifest, PkgResolutionId } from '@pnpm/types';
-import { type WantedLocalDependency } from './parseBareSpecifier.js';
-export { type WantedLocalDependency };
+import { isLocalFilesystemSpecifier, type WantedLocalDependency } from './parseBareSpecifier.js';
+export { isLocalFilesystemSpecifier, type WantedLocalDependency };
 export interface LocalResolveResult extends ResolveResult {
     manifest?: DependencyManifest;
     normalizedBareSpecifier?: string;

package/lib/index.js

@@ -4,8 +4,8 @@ import { getTarballIntegrity } from '@pnpm/crypto.hash';
 import { PnpmError } from '@pnpm/error';
 import { logger } from '@pnpm/logger';
 import { readProjectManifestOnly } from '@pnpm/workspace.project-manifest-reader';
-import { parseLocalPath, parseLocalScheme } from './parseBareSpecifier.js';
-export {};
+import { isLocalFilesystemSpecifier, parseLocalPath, parseLocalScheme } from './parseBareSpecifier.js';
+export { isLocalFilesystemSpecifier };
 /**
  * Resolves a dependency declared with an explicit local scheme:
  * `link:`, `workspace:`, `file:`, or (rejected) `path:`.

package/lib/parseBareSpecifier.d.ts

@@ -10,6 +10,20 @@ export interface WantedLocalDependency {
     bareSpecifier: string;
     injected?: boolean;
 }
+/**
+ * Whether a bare specifier's shape can only mean a local file or directory:
+ * the `link:` / `file:` protocols, a path-prefixed spec (`./`, `../`, `~/`,
+ * absolute POSIX paths, and Windows drive paths — including drive-relative
+ * ones like `C:dir`), or a bare tarball file name.
+ *
+ * Narrower than what {@link parseLocalPath} claims, which also takes any spec
+ * containing a path separator. That shape is statically indistinguishable from
+ * a hosted-git shorthand (`user/repo`) or a named-registry alias
+ * (`gh:@scope/pkg`), and the resolver chain only gets away with claiming it by
+ * running the local resolver last. Callers that dispatch on specifier shape
+ * without that ordering ask this instead.
+ */
+export declare function isLocalFilesystemSpecifier(bareSpecifier: string): boolean;
 export declare function parseLocalScheme(wd: WantedLocalDependency, projectDir: string, lockfileDir: string, opts: {
     preserveAbsolutePaths: boolean;
 }): LocalPackageSpec | null;

package/lib/parseBareSpecifier.js

@@ -17,6 +17,36 @@ class PathIsUnsupportedProtocolError extends PnpmError {
         this.protocol = protocol;
     }
 }
+/**
+ * Whether a bare specifier's shape can only mean a local file or directory:
+ * the `link:` / `file:` protocols, a path-prefixed spec (`./`, `../`, `~/`,
+ * absolute POSIX paths, and Windows drive paths — including drive-relative
+ * ones like `C:dir`), or a bare tarball file name.
+ *
+ * Narrower than what {@link parseLocalPath} claims, which also takes any spec
+ * containing a path separator. That shape is statically indistinguishable from
+ * a hosted-git shorthand (`user/repo`) or a named-registry alias
+ * (`gh:@scope/pkg`), and the resolver chain only gets away with claiming it by
+ * running the local resolver last. Callers that dispatch on specifier shape
+ * without that ordering ask this instead.
+ */
+export function isLocalFilesystemSpecifier(bareSpecifier) {
+    if (bareSpecifier.startsWith('link:') || bareSpecifier.startsWith('file:'))
+        return true;
+    if (isFilespec.test(bareSpecifier))
+        return true;
+    // Any other protocol — a `git+ssh:` / `https:` URL, an `npm:` alias, a
+    // named-registry prefix — belongs to its own resolver, tarball-shaped path
+    // or not.
+    if (bareSpecifier.includes(':'))
+        return false;
+    // A `#` here marks a hosted-git shorthand's committish
+    // (`user/repo#release.tgz`), not a local tarball: the protocol and
+    // path-prefixed forms already returned above.
+    if (bareSpecifier.includes('#'))
+        return false;
+    return isFilename.test(bareSpecifier);
+}
 export function parseLocalScheme(wd, projectDir, lockfileDir, opts) {
     if (wd.bareSpecifier.startsWith('link:') || wd.bareSpecifier.startsWith('workspace:')) {
         return fromLocal(wd, projectDir, lockfileDir, 'directory', opts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/resolving.local-resolver",
-  "version": "1101.1.19",
+  "version": "1101.2.0",
   "description": "Resolver for local packages",
   "keywords": [
     "pnpm",
@@ -29,11 +29,11 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/crypto.hash": "1100.0.2",
-    "@pnpm/error": "1100.1.3",
-    "@pnpm/resolving.resolver-base": "1101.1.1",
-    "@pnpm/types": "1102.0.0",
-    "@pnpm/workspace.project-manifest-reader": "1100.0.25",
+    "@pnpm/crypto.hash": "1100.0.3",
+    "@pnpm/error": "1100.1.4",
+    "@pnpm/resolving.resolver-base": "1101.2.0",
+    "@pnpm/types": "1102.1.0",
+    "@pnpm/workspace.project-manifest-reader": "1100.0.27",
     "normalize-path": "^3.0.0"
   },
   "peerDependencies": {
@@ -42,7 +42,7 @@
   "devDependencies": {
     "@jest/globals": "30.4.1",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/resolving.local-resolver": "1101.1.19",
+    "@pnpm/resolving.local-resolver": "1101.2.0",
     "@types/normalize-path": "^3.0.2"
   },
   "engines": {