@savvy-web/pnpm-plugin-silk 0.17.0 → 0.18.0

package/README.md

@@ -5,18 +5,18 @@
 [![TypeScript 6.0](https://img.shields.io/badge/TypeScript-6.0-3178c6.svg)](https://www.typescriptlang.org/)
 [![pnpm](https://img.shields.io/badge/pnpm-%3E%3D11-orange)](https://pnpm.io/)
 
-Centralized dependency version management for the Silk ecosystem via pnpm config dependencies. Share curated dependency catalogs, security overrides and build configurations across multiple repositories from a single source of truth.
+Centralized dependency-version management for the Silk ecosystem, delivered as a pnpm config dependency. Define dependency catalogs, security overrides and build settings once, then share them across every repository in the ecosystem.
 
 ## Features
 
-- **Dual catalog strategy** — Current versions for direct dependencies (`catalog:silk`), permissive ranges for peer dependencies (`catalog:silkPeers`)
-- **Security overrides** — Centralized CVE fixes via `overrides` that propagate to all consuming repositories
-- **Build allowlist** — `allowBuilds` map (pnpm 11) controls which packages may run install scripts; local repos can extend it per-key
-- **Security defaults** — `strictDepBuilds`, `blockExoticSubdeps` and `minimumReleaseAge` are enforced by default; weakening them triggers a prominent warning
-- **Workspace settings inheritance** — `publicHoistPattern`, `packageExtensions`, `allowedDeprecatedVersions`, `supportedArchitectures` and `auditConfig` all merge into child workspaces
-- **Peer dependency rules** — Syncs `peerDependencyRules` (allowedVersions, ignoreMissing, allowAny) to suppress common peer warnings
-- **Effect ecosystem management** — 26 coordinated `@effect/*` packages across eight functional groups with compatible version resolution
-- **Non-destructive merging** — Local definitions always take precedence, with clear warnings for divergences
+- **Dual catalog strategy** — current versions for direct dependencies (`catalog:silk`) and permissive ranges for peer dependencies (`catalog:silkPeers`)
+- **Security overrides** — centralized CVE fixes via `overrides` that propagate to every consuming repository
+- **Build allowlist** — an `allowBuilds` map controls which packages may run install scripts; consuming repos extend it per key
+- **Security defaults** — `strictDepBuilds`, `blockExoticSubdeps` and `minimumReleaseAge` are enforced by default; weakening one triggers a warning
+- **Workspace settings inheritance** — `publicHoistPattern` and `allowedDeprecatedVersions` merge into consuming workspaces
+- **Peer dependency rules** — `peerDependencyRules.allowedVersions` suppresses common peer-dependency warnings
+- **Effect ecosystem coordination** — the full `@effect/*` package family and `effect` itself, pinned to mutually compatible versions
+- **Non-destructive merging** — local definitions always win, with warnings when they diverge from the shared defaults
 
 ## Install
 
@@ -49,20 +49,7 @@ Reference Silk catalogs in your `package.json`:
 }
 ```
 
-The `silk` catalog provides current/latest versions for direct dependencies, while `silkPeers` provides permissive ranges for peer dependencies. Security overrides, build script allowlists and hoist patterns are automatically merged during `pnpm install`.
-
-## Documentation
-
-- [Configuration](./docs/configuration.md) — Catalogs, overrides, Effect ecosystem packages, `allowBuilds`, security settings and workspace configuration
-- [How it works](./docs/how-it-works.md) — Architecture overview, merge strategy and bundle details
-- [Troubleshooting](./docs/troubleshooting.md) — Common issues and solutions
-
-## More information
-
-- [Changelog](./CHANGELOG.md) — Release history
-- [Contributing](./CONTRIBUTING.md) — Development setup and guidelines
-- [Security Policy](./SECURITY.md) — Vulnerability reporting
-- [Code of Conduct](./CODE_OF_CONDUCT.md) — Community guidelines
+The `silk` catalog supplies current versions for direct dependencies and `silkPeers` supplies permissive ranges for peers. Security overrides, build allowlists and hoist patterns merge automatically during `pnpm install`.
 
 ## License
 

package/_virtual/_rolldown-pnpm-config/virtual/catalogs.js

@@ -0,0 +1,103 @@
+//#region \0rolldown-pnpm-config/virtual/catalogs
+const catalogs = /* @__PURE__ */ new Map([["silk", /* @__PURE__ */ new Map([
+	["@effect/ai", "^0.36.0"],
+	["@effect/ai-amazon-bedrock", "^0.16.1"],
+	["@effect/ai-anthropic", "^0.26.0"],
+	["@effect/ai-google", "^0.15.0"],
+	["@effect/ai-openai", "^0.40.1"],
+	["@effect/cli", "^0.75.2"],
+	["@effect/cluster", "^0.59.0"],
+	["@effect/experimental", "^0.60.0"],
+	["@effect/language-service", "^0.86.2"],
+	["@effect/opentelemetry", "^0.63.0"],
+	["@effect/platform", "^0.96.2"],
+	["@effect/platform-browser", "^0.76.0"],
+	["@effect/platform-bun", "^0.90.0"],
+	["@effect/platform-node", "^0.107.0"],
+	["@effect/platform-node-shared", "^0.60.0"],
+	["@effect/printer", "^0.49.0"],
+	["@effect/printer-ansi", "^0.49.0"],
+	["@effect/rpc", "^0.75.1"],
+	["@effect/sql", "^0.51.1"],
+	["@effect/sql-clickhouse", "^0.49.0"],
+	["@effect/sql-d1", "^0.49.0"],
+	["@effect/sql-drizzle", "^0.50.0"],
+	["@effect/sql-kysely", "^0.47.0"],
+	["@effect/sql-libsql", "^0.41.0"],
+	["@effect/sql-mssql", "^0.52.0"],
+	["@effect/sql-mysql2", "^0.52.0"],
+	["@effect/sql-pg", "^0.52.1"],
+	["@effect/sql-sqlite-bun", "^0.52.0"],
+	["@effect/sql-sqlite-do", "^0.29.0"],
+	["@effect/sql-sqlite-node", "^0.52.0"],
+	["@effect/sql-sqlite-react-native", "^0.54.0"],
+	["@effect/sql-sqlite-wasm", "^0.52.0"],
+	["@effect/tsgo", "^0.15.0"],
+	["@effect/typeclass", "^0.40.0"],
+	["@effect/vitest", "^0.29.0"],
+	["@effect/workflow", "^0.18.2"],
+	["@types/node", "^26.0.1"],
+	["@types/react", "^19.2.17"],
+	["@types/react-dom", "^19.2.3"],
+	["@typescript/native-preview", "^7.0.0-dev.20260630.1"],
+	["@vitest/coverage-istanbul", "^4.1.9"],
+	["@vitest/coverage-v8", "^4.1.9"],
+	["effect", "^3.21.4"],
+	["react", "^19.2.7"],
+	["react-dom", "^19.2.7"],
+	["tsx", "^4.22.4"],
+	["typescript", "^6.0.3"],
+	["vitest", "^4.1.9"]
+])], ["silkPeers", /* @__PURE__ */ new Map([
+	["@effect/ai", "^0.36.0"],
+	["@effect/ai-amazon-bedrock", "^0.16.1"],
+	["@effect/ai-anthropic", "^0.26.0"],
+	["@effect/ai-google", "^0.15.0"],
+	["@effect/ai-openai", "^0.40.1"],
+	["@effect/cli", "^0.75.2"],
+	["@effect/cluster", "^0.59.0"],
+	["@effect/experimental", "^0.60.0"],
+	["@effect/language-service", "^0.86.2"],
+	["@effect/opentelemetry", "^0.63.0"],
+	["@effect/platform", "^0.96.0"],
+	["@effect/platform-browser", "^0.76.0"],
+	["@effect/platform-bun", "^0.90.0"],
+	["@effect/platform-node", "^0.107.0"],
+	["@effect/platform-node-shared", "^0.60.0"],
+	["@effect/printer", "^0.49.0"],
+	["@effect/printer-ansi", "^0.49.0"],
+	["@effect/rpc", "^0.75.1"],
+	["@effect/sql", "^0.51.0"],
+	["@effect/sql-clickhouse", "^0.49.0"],
+	["@effect/sql-d1", "^0.49.0"],
+	["@effect/sql-drizzle", "^0.50.0"],
+	["@effect/sql-kysely", "^0.47.0"],
+	["@effect/sql-libsql", "^0.41.0"],
+	["@effect/sql-mssql", "^0.52.0"],
+	["@effect/sql-mysql2", "^0.52.0"],
+	["@effect/sql-pg", "^0.52.1"],
+	["@effect/sql-sqlite-bun", "^0.52.0"],
+	["@effect/sql-sqlite-do", "^0.29.0"],
+	["@effect/sql-sqlite-node", "^0.52.0"],
+	["@effect/sql-sqlite-react-native", "^0.54.0"],
+	["@effect/sql-sqlite-wasm", "^0.52.0"],
+	["@effect/tsgo", "^0.15.0"],
+	["@effect/typeclass", "^0.40.0"],
+	["@effect/vitest", "^0.29.0"],
+	["@effect/workflow", "^0.18.2"],
+	["@types/node", "^26.0.0"],
+	["@types/react", "^19.2.0"],
+	["@types/react-dom", "^19.2.0"],
+	["@typescript/native-preview", "^7.0.0-dev.20260612.1"],
+	["@vitest/coverage-istanbul", "^4.1.0"],
+	["@vitest/coverage-v8", "^4.1.0"],
+	["effect", "^3.21.0"],
+	["react", "^19.2.0"],
+	["react-dom", "^19.2.0"],
+	["tsx", "^4.22.4"],
+	["typescript", "^6.0.0"],
+	["vitest", "^4.1.0"]
+])]]);
+
+//#endregion
+export { catalogs };

package/index.d.ts

@@ -1,163 +1,2 @@
-//#region src/catalogs/types.d.ts
-/**
- * Type definitions for Silk catalog management.
- *
- * @packageDocumentation
- */
-/**
- * A catalog is a record mapping package names to semver version ranges.
- *
- * @example
- * ```typescript
- * import type { Catalog } from "@savvy-web/pnpm-plugin-silk";
- *
- * const myCatalog: Catalog = {
- *   typescript: "^5.9.0",
- *   vitest: "^4.0.0",
- * };
- * ```
- *
- * @public
- */
-type Catalog = Record<string, string>;
-/**
- * A pnpm package extension entry, adding missing metadata to a package.
- *
- * @public
- */
-interface PackageExtension {
-  readonly dependencies?: Record<string, string>;
-  readonly optionalDependencies?: Record<string, string>;
-  readonly peerDependencies?: Record<string, string>;
-  readonly peerDependenciesMeta?: Record<string, {
-    readonly optional?: boolean;
-  }>;
-}
-/**
- * Supported architectures for optional-dependency installation.
- *
- * @remarks
- * A type alias (not an interface) so it carries an implicit index signature and
- * can be passed to {@link mergeArrayRecord} without a cast.
- *
- * @public
- */
-type SupportedArchitectures = {
-  readonly os?: readonly string[];
-  readonly cpu?: readonly string[];
-  readonly libc?: readonly string[];
-};
-/**
- * Audit advisory allowlist (pnpm 11 prefers GHSA identifiers).
- *
- * @remarks
- * A type alias (not an interface) so it carries an implicit index signature and
- * can be passed to {@link mergeArrayRecord} without a cast.
- *
- * @public
- */
-type AuditConfig = {
-  readonly ignoreGhsas?: readonly string[];
-  readonly ignoreCves?: readonly string[];
-};
-/**
- * The Silk catalogs structure containing two named catalogs for version management.
- *
- * @remarks
- * Use {@link silkCatalogs} to access the pre-configured catalog instance.
- * The `silk` catalog contains pinned current versions for direct dependencies,
- * while `silkPeers` contains permissive ranges suitable for peerDependencies.
- *
- * @example
- * ```typescript
- * import { silkCatalogs } from "@savvy-web/pnpm-plugin-silk";
- * import type { SilkCatalogs } from "@savvy-web/pnpm-plugin-silk";
- *
- * // Access the pre-configured catalogs
- * const typescriptVersion = silkCatalogs.silk.typescript;
- * const peerRange = silkCatalogs.silkPeers.typescript;
- * ```
- *
- * @public
- */
-interface SilkCatalogs {
-  /**
-   * Current/latest versions for direct dependencies.
-   * Use with `catalog:silk` in package.json.
-   */
-  readonly silk: Catalog;
-  /**
-   * Permissive ranges for peerDependencies.
-   * Use with `catalog:silkPeers` in package.json.
-   */
-  readonly silkPeers: Catalog;
-  /**
-   * Security overrides for known CVEs.
-   * Synced to pnpm `overrides` configuration.
-   */
-  readonly silkOverrides: Catalog;
-  /**
-   * Packages to hoist to the virtual store root.
-   * Synced to pnpm `publicHoistPattern` configuration.
-   */
-  readonly silkPublicHoistPattern: readonly string[];
-  /**
-   * Map of package matchers to whether their build scripts may run.
-   * Synced to pnpm `allowBuilds`.
-   */
-  readonly silkAllowBuilds: Record<string, boolean>;
-  /** Whether installs fail on unreviewed dependency build scripts. */
-  readonly silkStrictDepBuilds?: boolean;
-  /** Whether transitive deps may use exotic sources (git/tarball). */
-  readonly silkBlockExoticSubdeps?: boolean;
-  /** Minimum minutes since publication before a version may install. */
-  readonly silkMinimumReleaseAge?: number;
-  /** Package patterns excluded from the release-age constraint. */
-  readonly silkMinimumReleaseAgeExclude: readonly string[];
-  /** Package metadata extensions, synced to pnpm `packageExtensions`. */
-  readonly silkPackageExtensions: Record<string, PackageExtension>;
-  /** Deprecation warnings to mute, synced to `allowedDeprecatedVersions`. */
-  readonly silkAllowedDeprecatedVersions: Record<string, string>;
-  /** Supported architectures for optional-dependency installs. */
-  readonly silkSupportedArchitectures: SupportedArchitectures;
-  /** Audit advisory allowlist, synced to `auditConfig`. */
-  readonly silkAuditConfig: AuditConfig;
-  /**
-   * Whether pnpm prompts for confirmation before purging `node_modules`.
-   * Synced to pnpm `confirmModulesPurge`. Child repos may override freely.
-   */
-  readonly silkConfirmModulesPurge?: boolean;
-}
-/**
- * Peer dependency rules synced from the Silk plugin workspace.
- *
- * @public
- */
-interface SilkPeerDependencyRules {
-  /**
-   * Version ranges that suppress unmet peer dependency warnings.
-   * Keys are "package\>peer" dependency paths.
-   */
-  readonly allowedVersions: Record<string, string>;
-  /**
-   * Package names whose missing peer dependency warnings are suppressed.
-   */
-  readonly ignoreMissing: readonly string[];
-  /**
-   * Package patterns that resolve to any version regardless of peer range.
-   */
-  readonly allowAny: readonly string[];
-}
-//#endregion
-//#region src/catalogs/generated.d.ts
-/**
- * The complete Silk catalogs generated from pnpm-workspace.yaml.
- */
-declare const silkCatalogs: SilkCatalogs;
-/**
- * Peer dependency rules generated from pnpm-workspace.yaml.
- */
-declare const silkPeerDependencyRules: SilkPeerDependencyRules;
-//#endregion
-export { type AuditConfig, type Catalog, type PackageExtension, type SilkCatalogs, type SilkPeerDependencyRules, type SupportedArchitectures, silkCatalogs, silkPeerDependencyRules };
-//# sourceMappingURL=index.d.ts.map
+import { catalogs } from "rolldown-pnpm-config/virtual/catalogs";
+export { catalogs };

package/index.js

@@ -1,3 +1,3 @@
-import { silkCatalogs, silkPeerDependencyRules } from "./catalogs/generated.js";
+import { catalogs } from "./_virtual/_rolldown-pnpm-config/virtual/catalogs.js";
 
-export { silkCatalogs, silkPeerDependencyRules };
+export { catalogs };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@savvy-web/pnpm-plugin-silk",
-	"version": "0.17.0",
+	"version": "0.18.0",
 	"private": false,
 	"description": "pnpm config dependency for centralized catalog management across the Silk ecosystem.",
 	"keywords": [
@@ -11,13 +11,14 @@
 		"monorepo",
 		"silk"
 	],
-	"homepage": "https://github.com/savvy-web/pnpm-plugin-silk#readme",
+	"homepage": "https://github.com/savvy-web/systems/packages/pnpm-plugin-silk#readme",
 	"bugs": {
-		"url": "https://github.com/savvy-web/pnpm-plugin-silk/issues"
+		"url": "https://github.com/savvy-web/systems/issues"
 	},
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/savvy-web/pnpm-plugin-silk.git"
+		"url": "git+https://github.com/savvy-web/systems.git",
+		"directory": "packages/pnpm-plugin-silk"
 	},
 	"license": "MIT",
 	"author": {