@warlock.js/core 5.29.0 → 5.31.0

package/esm/generations/pnpm-build-approvals.mjs

@@ -1,5 +1,91 @@
-//#region ../core/src/generations/pnpm-build-approvals.ts
-/** Keep pnpm 11 native build approval local to the feature installer. */
+import path from "node:path";
+import { existsSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+
+//#region ../../packages/core/src/generations/pnpm-build-approvals.ts
+function pnpmBuildApprovalLayout(version) {
+	const match = /^(\d+)\.(\d+)\./.exec(version?.trim() ?? "");
+	if (!match) return "allowBuilds";
+	const major = Number(match[1]);
+	const minor = Number(match[2]);
+	if (major < 10 || major === 10 && minor < 5) return "packageJson";
+	if (major === 10 && minor < 26) return "onlyBuiltDependencies";
+	return "allowBuilds";
+}
+/**
+* The installed pnpm's version, or `undefined` when it cannot be read.
+*/
+function getPnpmVersion(cwd) {
+	try {
+		return execFileSync("pnpm", ["--version"], {
+			cwd,
+			encoding: "utf8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			],
+			timeout: 15e3,
+			shell: process.platform === "win32"
+		}).trim();
+	} catch {
+		return;
+	}
+}
+/**
+* True when a directory ABOVE `projectRoot` holds a `pnpm-workspace.yaml`: the
+* app is a member of a parent workspace, which owns the build-approval policy.
+*/
+function isInsideParentPnpmWorkspace(projectRoot) {
+	let dir = path.dirname(path.resolve(projectRoot));
+	while (true) {
+		if (existsSync(path.join(dir, "pnpm-workspace.yaml"))) return true;
+		const parent = path.dirname(dir);
+		if (parent === dir) return false;
+		dir = parent;
+	}
+}
+/**
+* Add packages to `pnpm.onlyBuiltDependencies` in a parsed package.json,
+* keeping existing entries and their order.
+*/
+function mergePackageJsonBuildApprovals(packageJson, packages) {
+	const pnpm = packageJson.pnpm ?? {};
+	const current = Array.isArray(pnpm.onlyBuiltDependencies) ? pnpm.onlyBuiltDependencies : [];
+	const merged = [...current, ...packages.filter((name) => !current.includes(name))];
+	return {
+		...packageJson,
+		pnpm: {
+			...pnpm,
+			onlyBuiltDependencies: merged
+		}
+	};
+}
+/**
+* Add packages to a block-style `onlyBuiltDependencies:` list in a workspace
+* file, creating the list when absent. A flow list or an alias is left alone.
+*/
+function mergeOnlyBuiltDependencies(yaml, packages) {
+	if (packages.length === 0) return yaml;
+	const block = /^onlyBuiltDependencies:\s*(?:#.*)?(?:\r?\n|$)/m.exec(yaml);
+	if (!block) {
+		if (/^(?:onlyBuiltDependencies|"onlyBuiltDependencies"|'onlyBuiltDependencies')\s*:/m.test(yaml)) return yaml;
+		const items = packages.map((name) => `  - ${name}`).join("\n");
+		return `${yaml.replace(/\s*$/, "")}\n\n# pnpm 10.5-10.25 read install-script approvals from this list.\nonlyBuiltDependencies:\n${items}\n`;
+	}
+	const start = block.index + block[0].length;
+	const tail = yaml.slice(start);
+	const nextTopLevel = /^(?!\s|#|$)[^\r\n]+/m.exec(tail);
+	const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;
+	const list = yaml.slice(start, end);
+	const listed = new Set([...list.matchAll(/^\s*-\s*["']?([^"'\s#]+)["']?/gm)].map((entry) => entry[1]));
+	const missing = packages.filter((name) => !listed.has(name));
+	if (missing.length === 0) return yaml;
+	const indentation = /^([ \t]*)-/m.exec(list)?.[1] ?? "  ";
+	const additions = missing.map((name) => `${indentation}- ${name}\n`).join("");
+	return `${yaml.slice(0, start)}${additions}${list}${yaml.slice(end)}`;
+}
+/** Add sharp to the workspace `allowBuilds` policy (pnpm 10.26+, 11, 12). */
 function mergePnpmSharpApproval(yaml) {
 	const block = /^allowBuilds:\s*(?:#.*)?(?:\r?\n|$)/m.exec(yaml);
 	if (!block) {
@@ -25,5 +111,5 @@ function mergePnpmSharpApproval(yaml) {
 }
 
 //#endregion
-export { mergePnpmSharpApproval };
+export { getPnpmVersion, isInsideParentPnpmWorkspace, mergeOnlyBuiltDependencies, mergePackageJsonBuildApprovals, mergePnpmSharpApproval, pnpmBuildApprovalLayout };
 //# sourceMappingURL=pnpm-build-approvals.mjs.map

package/esm/generations/pnpm-build-approvals.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-build-approvals.mjs","names":[],"sources":["../../../../../../../core/src/generations/pnpm-build-approvals.ts"],"sourcesContent":["/** Keep pnpm 11 native build approval local to the feature installer. */\nexport function mergePnpmSharpApproval(yaml: string): string {\n  const block = /^allowBuilds:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n  if (!block) {\n    // Do not hand-edit flow YAML: preserving an existing decision is safer\n    // than risking duplicate keys or discarded comments.\n    if (/^(?:allowBuilds|\"allowBuilds\"|'allowBuilds')\\s*:/m.test(yaml)) return yaml;\n    return `${yaml.replace(/\\s*$/, \"\")}\\nallowBuilds:\\n  sharp: true\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const mapping = yaml.slice(start, end);\n  const entry = /^(\\s*)(?:sharp|\"sharp\"|'sharp')\\s*:\\s*([^#\\r\\n]*)(.*)$/m.exec(mapping);\n  if (entry) {\n    const value = entry[2]!.trim();\n    if (value === \"true\" || value === \"false\") return yaml;\n    if (\n      !/^(?:set this to true or false|\"set this to true or false\"|'set this to true or false')$/.test(\n        value,\n      )\n    )\n      return yaml;\n    const comment = entry[3] ?? \"\";\n    const replacement = `${entry[1]}sharp: true${comment.startsWith(\"#\") ? \" \" : \"\"}${comment}`;\n    return `${yaml.slice(0, start)}${mapping.slice(0, entry.index)}${replacement}${mapping.slice(entry.index + entry[0].length)}${yaml.slice(end)}`;\n  }\n  const indentation = /^([ \\t]+)\\S/m.exec(mapping)?.[1] ?? \"  \";\n  return `${yaml.slice(0, start)}${indentation}sharp: true\\n${mapping}${yaml.slice(end)}`;\n}\n"],"mappings":";;AACA,SAAgB,uBAAuB,MAAsB;CAC3D,MAAM,QAAQ,uCAAuC,KAAK,IAAI;CAC9D,IAAI,CAAC,OAAO;EAGV,IAAI,oDAAoD,KAAK,IAAI,GAAG,OAAO;EAC3E,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE;CACrC;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,UAAU,KAAK,MAAM,OAAO,GAAG;CACrC,MAAM,QAAQ,0DAA0D,KAAK,OAAO;CACpF,IAAI,OAAO;EACT,MAAM,QAAQ,MAAM,EAAE,CAAE,KAAK;EAC7B,IAAI,UAAU,UAAU,UAAU,SAAS,OAAO;EAClD,IACE,CAAC,0FAA0F,KACzF,KACF,GAEA,OAAO;EACT,MAAM,UAAU,MAAM,MAAM;EAC5B,MAAM,cAAc,GAAG,MAAM,GAAG,aAAa,QAAQ,WAAW,GAAG,IAAI,MAAM,KAAK;EAClF,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,QAAQ,MAAM,GAAG,MAAM,KAAK,IAAI,cAAc,QAAQ,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,IAAI,KAAK,MAAM,GAAG;CAC9I;CACA,MAAM,cAAc,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM;CACzD,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,eAAe,UAAU,KAAK,MAAM,GAAG;AACtF"}
+{"version":3,"file":"pnpm-build-approvals.mjs","names":[],"sources":["../../../../../../../../packages/core/src/generations/pnpm-build-approvals.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/**\n * Where a pnpm version reads install-script approvals from (measured with real\n * installs for create-warlock 5.30.0; the scaffold applies the same rule):\n *\n * - `packageJson`: pnpm 7–9 and 10.0–10.4 reject a `pnpm-workspace.yaml`\n *   without `packages:` (\"packages field missing or empty\"), and adding\n *   `packages: [\".\"]` breaks every later `pnpm add` (ERR_PNPM_ADDING_TO_ROOT).\n *   Approvals go under `pnpm.onlyBuiltDependencies` in package.json and no\n *   workspace file is created.\n * - `onlyBuiltDependencies`: pnpm 10.5–10.25 accept a settings-only workspace\n *   file but ignore `allowBuilds`; they read `onlyBuiltDependencies` from it.\n * - `allowBuilds`: pnpm 10.26 and later. An unknown version gets this layout.\n */\nexport type PnpmBuildApprovalLayout = \"packageJson\" | \"onlyBuiltDependencies\" | \"allowBuilds\";\n\nexport function pnpmBuildApprovalLayout(version: string | undefined): PnpmBuildApprovalLayout {\n  const match = /^(\\d+)\\.(\\d+)\\./.exec(version?.trim() ?? \"\");\n\n  if (!match) return \"allowBuilds\";\n\n  const major = Number(match[1]);\n  const minor = Number(match[2]);\n\n  if (major < 10 || (major === 10 && minor < 5)) return \"packageJson\";\n  if (major === 10 && minor < 26) return \"onlyBuiltDependencies\";\n\n  return \"allowBuilds\";\n}\n\n/**\n * The installed pnpm's version, or `undefined` when it cannot be read.\n */\nexport function getPnpmVersion(cwd: string): string | undefined {\n  try {\n    return execFileSync(\"pnpm\", [\"--version\"], {\n      cwd,\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 15_000,\n      shell: process.platform === \"win32\",\n    }).trim();\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * True when a directory ABOVE `projectRoot` holds a `pnpm-workspace.yaml`: the\n * app is a member of a parent workspace, which owns the build-approval policy.\n */\nexport function isInsideParentPnpmWorkspace(projectRoot: string): boolean {\n  let dir = path.dirname(path.resolve(projectRoot));\n\n  while (true) {\n    if (existsSync(path.join(dir, \"pnpm-workspace.yaml\"))) return true;\n\n    const parent = path.dirname(dir);\n\n    if (parent === dir) return false;\n\n    dir = parent;\n  }\n}\n\n/**\n * Add packages to `pnpm.onlyBuiltDependencies` in a parsed package.json,\n * keeping existing entries and their order.\n */\nexport function mergePackageJsonBuildApprovals<T extends Record<string, unknown>>(\n  packageJson: T,\n  packages: readonly string[],\n): T {\n  const pnpm = (packageJson.pnpm ?? {}) as Record<string, unknown>;\n  const current = Array.isArray(pnpm.onlyBuiltDependencies)\n    ? (pnpm.onlyBuiltDependencies as string[])\n    : [];\n  const merged = [...current, ...packages.filter((name) => !current.includes(name))];\n\n  return { ...packageJson, pnpm: { ...pnpm, onlyBuiltDependencies: merged } };\n}\n\n/**\n * Add packages to a block-style `onlyBuiltDependencies:` list in a workspace\n * file, creating the list when absent. A flow list or an alias is left alone.\n */\nexport function mergeOnlyBuiltDependencies(yaml: string, packages: readonly string[]): string {\n  if (packages.length === 0) return yaml;\n\n  const block = /^onlyBuiltDependencies:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n\n  if (!block) {\n    if (\n      /^(?:onlyBuiltDependencies|\"onlyBuiltDependencies\"|'onlyBuiltDependencies')\\s*:/m.test(yaml)\n    ) {\n      return yaml;\n    }\n\n    const items = packages.map((name) => `  - ${name}`).join(\"\\n\");\n\n    return `${yaml.replace(/\\s*$/, \"\")}\\n\\n# pnpm 10.5-10.25 read install-script approvals from this list.\\nonlyBuiltDependencies:\\n${items}\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const list = yaml.slice(start, end);\n  const listed = new Set(\n    [...list.matchAll(/^\\s*-\\s*[\"']?([^\"'\\s#]+)[\"']?/gm)].map((entry) => entry[1]),\n  );\n  const missing = packages.filter((name) => !listed.has(name));\n\n  if (missing.length === 0) return yaml;\n\n  const indentation = /^([ \\t]*)-/m.exec(list)?.[1] ?? \"  \";\n  const additions = missing.map((name) => `${indentation}- ${name}\\n`).join(\"\");\n\n  return `${yaml.slice(0, start)}${additions}${list}${yaml.slice(end)}`;\n}\n\n/** Add sharp to the workspace `allowBuilds` policy (pnpm 10.26+, 11, 12). */\nexport function mergePnpmSharpApproval(yaml: string): string {\n  const block = /^allowBuilds:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n  if (!block) {\n    // Do not hand-edit flow YAML: preserving an existing decision is safer\n    // than risking duplicate keys or discarded comments.\n    if (/^(?:allowBuilds|\"allowBuilds\"|'allowBuilds')\\s*:/m.test(yaml)) return yaml;\n    return `${yaml.replace(/\\s*$/, \"\")}\\nallowBuilds:\\n  sharp: true\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const mapping = yaml.slice(start, end);\n  const entry = /^(\\s*)(?:sharp|\"sharp\"|'sharp')\\s*:\\s*([^#\\r\\n]*)(.*)$/m.exec(mapping);\n  if (entry) {\n    const value = entry[2]!.trim();\n    if (value === \"true\" || value === \"false\") return yaml;\n    if (\n      !/^(?:set this to true or false|\"set this to true or false\"|'set this to true or false')$/.test(\n        value,\n      )\n    )\n      return yaml;\n    const comment = entry[3] ?? \"\";\n    const replacement = `${entry[1]}sharp: true${comment.startsWith(\"#\") ? \" \" : \"\"}${comment}`;\n    return `${yaml.slice(0, start)}${mapping.slice(0, entry.index)}${replacement}${mapping.slice(entry.index + entry[0].length)}${yaml.slice(end)}`;\n  }\n  const indentation = /^([ \\t]+)\\S/m.exec(mapping)?.[1] ?? \"  \";\n  return `${yaml.slice(0, start)}${indentation}sharp: true\\n${mapping}${yaml.slice(end)}`;\n}\n"],"mappings":";;;;;AAmBA,SAAgB,wBAAwB,SAAsD;CAC5F,MAAM,QAAQ,kBAAkB,KAAK,SAAS,KAAK,KAAK,EAAE;CAE1D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,QAAQ,OAAO,MAAM,EAAE;CAC7B,MAAM,QAAQ,OAAO,MAAM,EAAE;CAE7B,IAAI,QAAQ,MAAO,UAAU,MAAM,QAAQ,GAAI,OAAO;CACtD,IAAI,UAAU,MAAM,QAAQ,IAAI,OAAO;CAEvC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,KAAiC;CAC9D,IAAI;EACF,OAAO,aAAa,QAAQ,CAAC,WAAW,GAAG;GACzC;GACA,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,OAAO,QAAQ,aAAa;EAC9B,CAAC,CAAC,CAAC,KAAK;CACV,QAAQ;EACN;CACF;AACF;;;;;AAMA,SAAgB,4BAA4B,aAA8B;CACxE,IAAI,MAAM,KAAK,QAAQ,KAAK,QAAQ,WAAW,CAAC;CAEhD,OAAO,MAAM;EACX,IAAI,WAAW,KAAK,KAAK,KAAK,qBAAqB,CAAC,GAAG,OAAO;EAE9D,MAAM,SAAS,KAAK,QAAQ,GAAG;EAE/B,IAAI,WAAW,KAAK,OAAO;EAE3B,MAAM;CACR;AACF;;;;;AAMA,SAAgB,+BACd,aACA,UACG;CACH,MAAM,OAAQ,YAAY,QAAQ,CAAC;CACnC,MAAM,UAAU,MAAM,QAAQ,KAAK,qBAAqB,IACnD,KAAK,wBACN,CAAC;CACL,MAAM,SAAS,CAAC,GAAG,SAAS,GAAG,SAAS,QAAQ,SAAS,CAAC,QAAQ,SAAS,IAAI,CAAC,CAAC;CAEjF,OAAO;EAAE,GAAG;EAAa,MAAM;GAAE,GAAG;GAAM,uBAAuB;EAAO;CAAE;AAC5E;;;;;AAMA,SAAgB,2BAA2B,MAAc,UAAqC;CAC5F,IAAI,SAAS,WAAW,GAAG,OAAO;CAElC,MAAM,QAAQ,iDAAiD,KAAK,IAAI;CAExE,IAAI,CAAC,OAAO;EACV,IACE,kFAAkF,KAAK,IAAI,GAE3F,OAAO;EAGT,MAAM,QAAQ,SAAS,KAAK,SAAS,OAAO,MAAM,CAAC,CAAC,KAAK,IAAI;EAE7D,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE,+FAA+F,MAAM;CAC1I;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,OAAO,KAAK,MAAM,OAAO,GAAG;CAClC,MAAM,SAAS,IAAI,IACjB,CAAC,GAAG,KAAK,SAAS,iCAAiC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,EAAE,CAC/E;CACA,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC;CAE3D,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,MAAM,cAAc,cAAc,KAAK,IAAI,CAAC,GAAG,MAAM;CACrD,MAAM,YAAY,QAAQ,KAAK,SAAS,GAAG,YAAY,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;CAE5E,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,OAAO,KAAK,MAAM,GAAG;AACpE;;AAGA,SAAgB,uBAAuB,MAAsB;CAC3D,MAAM,QAAQ,uCAAuC,KAAK,IAAI;CAC9D,IAAI,CAAC,OAAO;EAGV,IAAI,oDAAoD,KAAK,IAAI,GAAG,OAAO;EAC3E,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE;CACrC;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,UAAU,KAAK,MAAM,OAAO,GAAG;CACrC,MAAM,QAAQ,0DAA0D,KAAK,OAAO;CACpF,IAAI,OAAO;EACT,MAAM,QAAQ,MAAM,EAAE,CAAE,KAAK;EAC7B,IAAI,UAAU,UAAU,UAAU,SAAS,OAAO;EAClD,IACE,CAAC,0FAA0F,KACzF,KACF,GAEA,OAAO;EACT,MAAM,UAAU,MAAM,MAAM;EAC5B,MAAM,cAAc,GAAG,MAAM,GAAG,aAAa,QAAQ,WAAW,GAAG,IAAI,MAAM,KAAK;EAClF,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,QAAQ,MAAM,GAAG,MAAM,KAAK,IAAI,cAAc,QAAQ,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,IAAI,KAAK,MAAM,GAAG;CAC9I;CACA,MAAM,cAAc,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM;CACzD,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,eAAe,UAAU,KAAK,MAAM,GAAG;AACtF"}