create-strapi-app 5.49.0 → 5.50.0

package/dist/utils/package-json.mjs

@@ -2,6 +2,7 @@ import { join } from 'path';
 import { kebabCase, mergeWith } from 'lodash';
 import fse from 'fs-extra';
 import { engines } from './engines.mjs';
+import { shouldUsePackageJsonPnpmConfig, getPnpmOnlyBuiltDependencies } from './pnpm-config.mjs';
 
 const mergePackageJson = (existingPkg, pkg)=>mergeWith({}, existingPkg, pkg, (_objValue, srcValue)=>{
         if (Array.isArray(srcValue)) {
@@ -9,18 +10,15 @@ const mergePackageJson = (existingPkg, pkg)=>mergeWith({}, existingPkg, pkg, (_o
         }
         return undefined;
     });
-const getPnpmOnlyBuiltDependencies = (scope, existingPkg)=>{
-    if (scope.packageManager !== 'pnpm' || scope.database.client !== 'sqlite') {
+const getPnpmPackageJsonConfig = (scope, existingPkg)=>{
+    if (scope.packageManager !== 'pnpm' || !shouldUsePackageJsonPnpmConfig(scope.pnpmVersion)) {
         return {};
     }
     const existingOnlyBuiltDependencies = Array.isArray(existingPkg.pnpm?.onlyBuiltDependencies) ? existingPkg.pnpm.onlyBuiltDependencies.filter((dep)=>typeof dep === 'string') : [];
     return {
         pnpm: {
             ...existingPkg.pnpm ?? {},
-            onlyBuiltDependencies: Array.from(new Set([
-                ...existingOnlyBuiltDependencies,
-                'better-sqlite3'
-            ])).sort()
+            onlyBuiltDependencies: getPnpmOnlyBuiltDependencies(scope, existingOnlyBuiltDependencies)
         }
     };
 };
@@ -41,7 +39,7 @@ async function createPackageJSON(scope) {
             installId: scope.installId
         },
         engines,
-        ...getPnpmOnlyBuiltDependencies(scope, existingPkg)
+        ...getPnpmPackageJsonConfig(scope, existingPkg)
     };
     // copy templates
     await fse.writeJSON(pkgJSONPath, sortPackageJson(mergePackageJson(existingPkg, pkg)), {

package/dist/utils/package-json.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"package-json.mjs","sources":["../../src/utils/package-json.ts"],"sourcesContent":["import { join } from 'path';\nimport { kebabCase, mergeWith } from 'lodash';\nimport fse from 'fs-extra';\n\nimport { engines } from './engines';\nimport type { Scope } from '../types';\n\ntype PnpmPackageConfig = {\n  onlyBuiltDependencies?: string[];\n  [key: string]: unknown;\n};\n\ntype PackageJson = {\n  pnpm?: PnpmPackageConfig;\n  [key: string]: unknown;\n};\n\nconst mergePackageJson = (existingPkg: PackageJson, pkg: PackageJson) =>\n  mergeWith({}, existingPkg, pkg, (_objValue, srcValue) => {\n    if (Array.isArray(srcValue)) {\n      return srcValue;\n    }\n\n    return undefined;\n  });\n\nconst getPnpmOnlyBuiltDependencies = (scope: Scope, existingPkg: PackageJson) => {\n  if (scope.packageManager !== 'pnpm' || scope.database.client !== 'sqlite') {\n    return {};\n  }\n\n  const existingOnlyBuiltDependencies = Array.isArray(existingPkg.pnpm?.onlyBuiltDependencies)\n    ? existingPkg.pnpm.onlyBuiltDependencies.filter((dep): dep is string => typeof dep === 'string')\n    : [];\n\n  return {\n    pnpm: {\n      ...(existingPkg.pnpm ?? {}),\n      onlyBuiltDependencies: Array.from(\n        new Set([...existingOnlyBuiltDependencies, 'better-sqlite3'])\n      ).sort(),\n    },\n  };\n};\n\nexport async function createPackageJSON(scope: Scope) {\n  const { sortPackageJson } = await import('sort-package-json');\n\n  const pkgJSONPath = join(scope.rootPath, 'package.json');\n\n  const existingPkg = (await fse.readJSON(pkgJSONPath).catch(() => ({}))) as PackageJson;\n\n  const pkg = {\n    name: kebabCase(scope.name),\n    private: true,\n    version: '0.1.0',\n    description: 'A Strapi application',\n    devDependencies: scope.devDependencies ?? {},\n    dependencies: scope.dependencies ?? {},\n    strapi: {\n      ...(scope.packageJsonStrapi ?? {}),\n      uuid: scope.uuid,\n      installId: scope.installId,\n    },\n    engines,\n    ...getPnpmOnlyBuiltDependencies(scope, existingPkg),\n  };\n\n  // copy templates\n  await fse.writeJSON(pkgJSONPath, sortPackageJson(mergePackageJson(existingPkg, pkg)), {\n    spaces: 2,\n  });\n}\n"],"names":["mergePackageJson","existingPkg","pkg","mergeWith","_objValue","srcValue","Array","isArray","undefined","getPnpmOnlyBuiltDependencies","scope","packageManager","database","client","existingOnlyBuiltDependencies","pnpm","onlyBuiltDependencies","filter","dep","from","Set","sort","createPackageJSON","sortPackageJson","pkgJSONPath","join","rootPath","fse","readJSON","catch","name","kebabCase","private","version","description","devDependencies","dependencies","strapi","packageJsonStrapi","uuid","installId","engines","writeJSON","spaces"],"mappings":";;;;;AAiBA,MAAMA,gBAAAA,GAAmB,CAACC,WAAAA,EAA0BC,GAAAA,GAClDC,SAAAA,CAAU,EAAC,EAAGF,WAAAA,EAAaC,GAAAA,EAAK,CAACE,SAAAA,EAAWC,QAAAA,GAAAA;QAC1C,IAAIC,KAAAA,CAAMC,OAAO,CAACF,QAAAA,CAAAA,EAAW;YAC3B,OAAOA,QAAAA;AACT,QAAA;QAEA,OAAOG,SAAAA;AACT,IAAA,CAAA,CAAA;AAEF,MAAMC,4BAAAA,GAA+B,CAACC,KAAAA,EAAcT,WAAAA,GAAAA;IAClD,IAAIS,KAAAA,CAAMC,cAAc,KAAK,MAAA,IAAUD,MAAME,QAAQ,CAACC,MAAM,KAAK,QAAA,EAAU;AACzE,QAAA,OAAO,EAAC;AACV,IAAA;IAEA,MAAMC,6BAAAA,GAAgCR,MAAMC,OAAO,CAACN,YAAYc,IAAI,EAAEC,yBAClEf,WAAAA,CAAYc,IAAI,CAACC,qBAAqB,CAACC,MAAM,CAAC,CAACC,MAAuB,OAAOA,GAAAA,KAAQ,YACrF,EAAE;IAEN,OAAO;QACLH,IAAAA,EAAM;AACJ,YAAA,GAAId,WAAAA,CAAYc,IAAI,IAAI,EAAE;AAC1BC,YAAAA,qBAAAA,EAAuBV,KAAAA,CAAMa,IAAI,CAC/B,IAAIC,GAAAA,CAAI;AAAIN,gBAAAA,GAAAA,6BAAAA;AAA+B,gBAAA;AAAiB,aAAA,CAAA,CAAA,CAC5DO,IAAI;AACR;AACF,KAAA;AACF,CAAA;AAEO,eAAeC,kBAAkBZ,KAAY,EAAA;AAClD,IAAA,MAAM,EAAEa,eAAe,EAAE,GAAG,MAAM,OAAO,mBAAA,CAAA;AAEzC,IAAA,MAAMC,WAAAA,GAAcC,IAAAA,CAAKf,KAAAA,CAAMgB,QAAQ,EAAE,cAAA,CAAA;IAEzC,MAAMzB,WAAAA,GAAe,MAAM0B,GAAAA,CAAIC,QAAQ,CAACJ,WAAAA,CAAAA,CAAaK,KAAK,CAAC,KAAO,EAAC,CAAA,CAAA;AAEnE,IAAA,MAAM3B,GAAAA,GAAM;QACV4B,IAAAA,EAAMC,SAAAA,CAAUrB,MAAMoB,IAAI,CAAA;QAC1BE,OAAAA,EAAS,IAAA;QACTC,OAAAA,EAAS,OAAA;QACTC,WAAAA,EAAa,sBAAA;QACbC,eAAAA,EAAiBzB,KAAAA,CAAMyB,eAAe,IAAI,EAAC;QAC3CC,YAAAA,EAAc1B,KAAAA,CAAM0B,YAAY,IAAI,EAAC;QACrCC,MAAAA,EAAQ;AACN,YAAA,GAAI3B,KAAAA,CAAM4B,iBAAiB,IAAI,EAAE;AACjCC,YAAAA,IAAAA,EAAM7B,MAAM6B,IAAI;AAChBC,YAAAA,SAAAA,EAAW9B,MAAM8B;AACnB,SAAA;AACAC,QAAAA,OAAAA;QACA,GAAGhC,4BAAAA,CAA6BC,OAAOT,WAAAA;AACzC,KAAA;;AAGA,IAAA,MAAM0B,IAAIe,SAAS,CAAClB,aAAaD,eAAAA,CAAgBvB,gBAAAA,CAAiBC,aAAaC,GAAAA,CAAAA,CAAAA,EAAO;QACpFyC,MAAAA,EAAQ;AACV,KAAA,CAAA;AACF;;;;"}
+{"version":3,"file":"package-json.mjs","sources":["../../src/utils/package-json.ts"],"sourcesContent":["import { join } from 'path';\nimport { kebabCase, mergeWith } from 'lodash';\nimport fse from 'fs-extra';\n\nimport { engines } from './engines';\nimport { getPnpmOnlyBuiltDependencies, shouldUsePackageJsonPnpmConfig } from './pnpm-config';\nimport type { Scope } from '../types';\n\ntype PnpmPackageConfig = {\n  onlyBuiltDependencies?: string[];\n  [key: string]: unknown;\n};\n\ntype PackageJson = {\n  pnpm?: PnpmPackageConfig;\n  [key: string]: unknown;\n};\n\nconst mergePackageJson = (existingPkg: PackageJson, pkg: PackageJson) =>\n  mergeWith({}, existingPkg, pkg, (_objValue, srcValue) => {\n    if (Array.isArray(srcValue)) {\n      return srcValue;\n    }\n\n    return undefined;\n  });\n\nconst getPnpmPackageJsonConfig = (scope: Scope, existingPkg: PackageJson) => {\n  if (scope.packageManager !== 'pnpm' || !shouldUsePackageJsonPnpmConfig(scope.pnpmVersion)) {\n    return {};\n  }\n\n  const existingOnlyBuiltDependencies = Array.isArray(existingPkg.pnpm?.onlyBuiltDependencies)\n    ? existingPkg.pnpm.onlyBuiltDependencies.filter((dep): dep is string => typeof dep === 'string')\n    : [];\n\n  return {\n    pnpm: {\n      ...(existingPkg.pnpm ?? {}),\n      onlyBuiltDependencies: getPnpmOnlyBuiltDependencies(scope, existingOnlyBuiltDependencies),\n    },\n  };\n};\n\nexport async function createPackageJSON(scope: Scope) {\n  const { sortPackageJson } = await import('sort-package-json');\n\n  const pkgJSONPath = join(scope.rootPath, 'package.json');\n\n  const existingPkg = (await fse.readJSON(pkgJSONPath).catch(() => ({}))) as PackageJson;\n\n  const pkg = {\n    name: kebabCase(scope.name),\n    private: true,\n    version: '0.1.0',\n    description: 'A Strapi application',\n    devDependencies: scope.devDependencies ?? {},\n    dependencies: scope.dependencies ?? {},\n    strapi: {\n      ...(scope.packageJsonStrapi ?? {}),\n      uuid: scope.uuid,\n      installId: scope.installId,\n    },\n    engines,\n    ...getPnpmPackageJsonConfig(scope, existingPkg),\n  };\n\n  // copy templates\n  await fse.writeJSON(pkgJSONPath, sortPackageJson(mergePackageJson(existingPkg, pkg)), {\n    spaces: 2,\n  });\n}\n"],"names":["mergePackageJson","existingPkg","pkg","mergeWith","_objValue","srcValue","Array","isArray","undefined","getPnpmPackageJsonConfig","scope","packageManager","shouldUsePackageJsonPnpmConfig","pnpmVersion","existingOnlyBuiltDependencies","pnpm","onlyBuiltDependencies","filter","dep","getPnpmOnlyBuiltDependencies","createPackageJSON","sortPackageJson","pkgJSONPath","join","rootPath","fse","readJSON","catch","name","kebabCase","private","version","description","devDependencies","dependencies","strapi","packageJsonStrapi","uuid","installId","engines","writeJSON","spaces"],"mappings":";;;;;;AAkBA,MAAMA,gBAAAA,GAAmB,CAACC,WAAAA,EAA0BC,GAAAA,GAClDC,SAAAA,CAAU,EAAC,EAAGF,WAAAA,EAAaC,GAAAA,EAAK,CAACE,SAAAA,EAAWC,QAAAA,GAAAA;QAC1C,IAAIC,KAAAA,CAAMC,OAAO,CAACF,QAAAA,CAAAA,EAAW;YAC3B,OAAOA,QAAAA;AACT,QAAA;QAEA,OAAOG,SAAAA;AACT,IAAA,CAAA,CAAA;AAEF,MAAMC,wBAAAA,GAA2B,CAACC,KAAAA,EAAcT,WAAAA,GAAAA;IAC9C,IAAIS,KAAAA,CAAMC,cAAc,KAAK,MAAA,IAAU,CAACC,8BAAAA,CAA+BF,KAAAA,CAAMG,WAAW,CAAA,EAAG;AACzF,QAAA,OAAO,EAAC;AACV,IAAA;IAEA,MAAMC,6BAAAA,GAAgCR,MAAMC,OAAO,CAACN,YAAYc,IAAI,EAAEC,yBAClEf,WAAAA,CAAYc,IAAI,CAACC,qBAAqB,CAACC,MAAM,CAAC,CAACC,MAAuB,OAAOA,GAAAA,KAAQ,YACrF,EAAE;IAEN,OAAO;QACLH,IAAAA,EAAM;AACJ,YAAA,GAAId,WAAAA,CAAYc,IAAI,IAAI,EAAE;AAC1BC,YAAAA,qBAAAA,EAAuBG,6BAA6BT,KAAAA,EAAOI,6BAAAA;AAC7D;AACF,KAAA;AACF,CAAA;AAEO,eAAeM,kBAAkBV,KAAY,EAAA;AAClD,IAAA,MAAM,EAAEW,eAAe,EAAE,GAAG,MAAM,OAAO,mBAAA,CAAA;AAEzC,IAAA,MAAMC,WAAAA,GAAcC,IAAAA,CAAKb,KAAAA,CAAMc,QAAQ,EAAE,cAAA,CAAA;IAEzC,MAAMvB,WAAAA,GAAe,MAAMwB,GAAAA,CAAIC,QAAQ,CAACJ,WAAAA,CAAAA,CAAaK,KAAK,CAAC,KAAO,EAAC,CAAA,CAAA;AAEnE,IAAA,MAAMzB,GAAAA,GAAM;QACV0B,IAAAA,EAAMC,SAAAA,CAAUnB,MAAMkB,IAAI,CAAA;QAC1BE,OAAAA,EAAS,IAAA;QACTC,OAAAA,EAAS,OAAA;QACTC,WAAAA,EAAa,sBAAA;QACbC,eAAAA,EAAiBvB,KAAAA,CAAMuB,eAAe,IAAI,EAAC;QAC3CC,YAAAA,EAAcxB,KAAAA,CAAMwB,YAAY,IAAI,EAAC;QACrCC,MAAAA,EAAQ;AACN,YAAA,GAAIzB,KAAAA,CAAM0B,iBAAiB,IAAI,EAAE;AACjCC,YAAAA,IAAAA,EAAM3B,MAAM2B,IAAI;AAChBC,YAAAA,SAAAA,EAAW5B,MAAM4B;AACnB,SAAA;AACAC,QAAAA,OAAAA;QACA,GAAG9B,wBAAAA,CAAyBC,OAAOT,WAAAA;AACrC,KAAA;;AAGA,IAAA,MAAMwB,IAAIe,SAAS,CAAClB,aAAaD,eAAAA,CAAgBrB,gBAAAA,CAAiBC,aAAaC,GAAAA,CAAAA,CAAAA,EAAO;QACpFuC,MAAAA,EAAQ;AACV,KAAA,CAAA;AACF;;;;"}

package/dist/utils/pnpm-config.d.ts

@@ -0,0 +1,18 @@
+import type { Scope } from '../types';
+/** allowBuilds in pnpm-workspace.yaml (pnpm >= 10.26). */
+export declare const PNPM_WORKSPACE_CONFIG_MIN_VERSION = "10.26.0";
+/** pnpm 11 reads project settings from pnpm-workspace.yaml only. */
+export declare const PNPM11_MIN_VERSION = "11.0.0";
+/**
+ * Native / tooling packages Strapi needs to run postinstall scripts for (admin build, upload, sqlite).
+ */
+export declare const PNPM_STRAPI_BUILD_PACKAGES: readonly ["@swc/core", "core-js-pure", "esbuild", "sharp"];
+export declare const PNPM_SQLITE_BUILD_PACKAGE = "better-sqlite3";
+export declare const shouldUsePnpmWorkspaceConfig: (pnpmVersion: string | null | undefined) => boolean;
+export declare const shouldUsePackageJsonPnpmConfig: (pnpmVersion: string | null | undefined) => boolean;
+export declare const getPnpmBuildPackageNames: (scope: Scope) => string[];
+export declare const getPnpmAllowBuilds: (scope: Scope) => Record<string, true>;
+export declare const getPnpmOnlyBuiltDependencies: (scope: Scope, existing?: string[]) => string[];
+export declare const formatPnpmWorkspaceYaml: (scope: Scope, pnpmVersion: string | null) => string;
+export declare const writePnpmWorkspaceConfig: (scope: Scope, pnpmVersion: string | null) => Promise<void>;
+//# sourceMappingURL=pnpm-config.d.ts.map

package/dist/utils/pnpm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm-config.d.ts","sourceRoot":"","sources":["../../src/utils/pnpm-config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,0DAA0D;AAC1D,eAAO,MAAM,iCAAiC,YAAY,CAAC;AAE3D,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,0BAA0B,4DAK7B,CAAC;AAEX,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAE1D,eAAO,MAAM,4BAA4B,GAAI,aAAa,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,OAIrF,CAAC;AAEF,eAAO,MAAM,8BAA8B,GAAI,aAAa,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,OAQvF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,OAAO,KAAK,KAAG,MAAM,EAQ7D,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,OAAO,KAAK,KAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAKpE,CAAC;AAEF,eAAO,MAAM,4BAA4B,GAAI,OAAO,KAAK,EAAE,WAAU,MAAM,EAAO,KAAG,MAAM,EAE1F,CAAC;AAUF,eAAO,MAAM,uBAAuB,GAAI,OAAO,KAAK,EAAE,aAAa,MAAM,GAAG,IAAI,KAAG,MAuBlF,CAAC;AAgBF,eAAO,MAAM,wBAAwB,GACnC,OAAO,KAAK,EACZ,aAAa,MAAM,GAAG,IAAI,KACzB,OAAO,CAAC,IAAI,CAgBd,CAAC"}

package/dist/utils/pnpm-config.js

@@ -0,0 +1,113 @@
+'use strict';
+
+var path = require('node:path');
+var fse = require('fs-extra');
+var semver = require('semver');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var fse__default = /*#__PURE__*/_interopDefault(fse);
+var semver__default = /*#__PURE__*/_interopDefault(semver);
+
+/** allowBuilds in pnpm-workspace.yaml (pnpm >= 10.26). */ const PNPM_WORKSPACE_CONFIG_MIN_VERSION = '10.26.0';
+/** pnpm 11 reads project settings from pnpm-workspace.yaml only. */ const PNPM11_MIN_VERSION = '11.0.0';
+/**
+ * Native / tooling packages Strapi needs to run postinstall scripts for (admin build, upload, sqlite).
+ */ const PNPM_STRAPI_BUILD_PACKAGES = [
+    '@swc/core',
+    'core-js-pure',
+    'esbuild',
+    'sharp'
+];
+const PNPM_SQLITE_BUILD_PACKAGE = 'better-sqlite3';
+const shouldUsePnpmWorkspaceConfig = (pnpmVersion)=>{
+    const normalized = pnpmVersion ? semver__default.default.coerce(pnpmVersion)?.version : null;
+    return normalized ? semver__default.default.gte(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION) : true;
+};
+const shouldUsePackageJsonPnpmConfig = (pnpmVersion)=>{
+    const normalized = pnpmVersion ? semver__default.default.coerce(pnpmVersion)?.version : null;
+    if (!normalized) {
+        return false;
+    }
+    return semver__default.default.lt(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION);
+};
+const getPnpmBuildPackageNames = (scope)=>{
+    const packages = new Set(PNPM_STRAPI_BUILD_PACKAGES);
+    if (scope.database.client === 'sqlite') {
+        packages.add(PNPM_SQLITE_BUILD_PACKAGE);
+    }
+    return Array.from(packages).sort();
+};
+const getPnpmAllowBuilds = (scope)=>{
+    return Object.fromEntries(getPnpmBuildPackageNames(scope).map((name)=>[
+            name,
+            true
+        ]));
+};
+const getPnpmOnlyBuiltDependencies = (scope, existing = [])=>{
+    return Array.from(new Set([
+        ...existing,
+        ...getPnpmBuildPackageNames(scope)
+    ])).sort();
+};
+const quoteYamlKey = (key)=>{
+    if (/^[a-z0-9_-]+$/.test(key)) {
+        return key;
+    }
+    return `'${key}'`;
+};
+const formatPnpmWorkspaceYaml = (scope, pnpmVersion)=>{
+    const allowBuilds = getPnpmAllowBuilds(scope);
+    const normalized = pnpmVersion ? semver__default.default.coerce(pnpmVersion)?.version : null;
+    const isPnpm11 = normalized ? semver__default.default.gte(normalized, PNPM11_MIN_VERSION) : true;
+    const lines = [
+        'packages:',
+        "  - '.'",
+        ''
+    ];
+    if (isPnpm11) {
+        lines.push('# Allow day-0 @strapi/* npm publishes while keeping pnpm 11 supply-chain defaults for other deps.', 'minimumReleaseAgeExclude:', "  - '@strapi/*'", '');
+    }
+    lines.push('allowBuilds:');
+    for (const name of Object.keys(allowBuilds).sort()){
+        lines.push(`  ${quoteYamlKey(name)}: true`);
+    }
+    lines.push('');
+    return lines.join('\n');
+};
+const hasParentPnpmWorkspace = async (rootPath)=>{
+    let dir = path.join(rootPath, '..');
+    while(dir !== path.join(dir, '..')){
+        if (await fse__default.default.pathExists(path.join(dir, 'pnpm-workspace.yaml'))) {
+            return true;
+        }
+        dir = path.join(dir, '..');
+    }
+    return false;
+};
+const writePnpmWorkspaceConfig = async (scope, pnpmVersion)=>{
+    if (scope.packageManager !== 'pnpm' || !shouldUsePnpmWorkspaceConfig(pnpmVersion)) {
+        return;
+    }
+    const workspaceFile = path.join(scope.rootPath, 'pnpm-workspace.yaml');
+    if (await hasParentPnpmWorkspace(scope.rootPath)) {
+        return;
+    }
+    if (await fse__default.default.pathExists(workspaceFile)) {
+        return;
+    }
+    await fse__default.default.writeFile(workspaceFile, formatPnpmWorkspaceYaml(scope, pnpmVersion));
+};
+
+exports.PNPM11_MIN_VERSION = PNPM11_MIN_VERSION;
+exports.PNPM_SQLITE_BUILD_PACKAGE = PNPM_SQLITE_BUILD_PACKAGE;
+exports.PNPM_STRAPI_BUILD_PACKAGES = PNPM_STRAPI_BUILD_PACKAGES;
+exports.PNPM_WORKSPACE_CONFIG_MIN_VERSION = PNPM_WORKSPACE_CONFIG_MIN_VERSION;
+exports.formatPnpmWorkspaceYaml = formatPnpmWorkspaceYaml;
+exports.getPnpmAllowBuilds = getPnpmAllowBuilds;
+exports.getPnpmBuildPackageNames = getPnpmBuildPackageNames;
+exports.getPnpmOnlyBuiltDependencies = getPnpmOnlyBuiltDependencies;
+exports.shouldUsePackageJsonPnpmConfig = shouldUsePackageJsonPnpmConfig;
+exports.shouldUsePnpmWorkspaceConfig = shouldUsePnpmWorkspaceConfig;
+exports.writePnpmWorkspaceConfig = writePnpmWorkspaceConfig;
+//# sourceMappingURL=pnpm-config.js.map

package/dist/utils/pnpm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm-config.js","sources":["../../src/utils/pnpm-config.ts"],"sourcesContent":["import { join } from 'node:path';\nimport fse from 'fs-extra';\nimport semver from 'semver';\n\nimport type { Scope } from '../types';\n\n/** allowBuilds in pnpm-workspace.yaml (pnpm >= 10.26). */\nexport const PNPM_WORKSPACE_CONFIG_MIN_VERSION = '10.26.0';\n\n/** pnpm 11 reads project settings from pnpm-workspace.yaml only. */\nexport const PNPM11_MIN_VERSION = '11.0.0';\n\n/**\n * Native / tooling packages Strapi needs to run postinstall scripts for (admin build, upload, sqlite).\n */\nexport const PNPM_STRAPI_BUILD_PACKAGES = [\n  '@swc/core',\n  'core-js-pure',\n  'esbuild',\n  'sharp',\n] as const;\n\nexport const PNPM_SQLITE_BUILD_PACKAGE = 'better-sqlite3';\n\nexport const shouldUsePnpmWorkspaceConfig = (pnpmVersion: string | null | undefined): boolean => {\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n\n  return normalized ? semver.gte(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION) : true;\n};\n\nexport const shouldUsePackageJsonPnpmConfig = (pnpmVersion: string | null | undefined): boolean => {\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n\n  if (!normalized) {\n    return false;\n  }\n\n  return semver.lt(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION);\n};\n\nexport const getPnpmBuildPackageNames = (scope: Scope): string[] => {\n  const packages = new Set<string>(PNPM_STRAPI_BUILD_PACKAGES);\n\n  if (scope.database.client === 'sqlite') {\n    packages.add(PNPM_SQLITE_BUILD_PACKAGE);\n  }\n\n  return Array.from(packages).sort();\n};\n\nexport const getPnpmAllowBuilds = (scope: Scope): Record<string, true> => {\n  return Object.fromEntries(getPnpmBuildPackageNames(scope).map((name) => [name, true])) as Record<\n    string,\n    true\n  >;\n};\n\nexport const getPnpmOnlyBuiltDependencies = (scope: Scope, existing: string[] = []): string[] => {\n  return Array.from(new Set([...existing, ...getPnpmBuildPackageNames(scope)])).sort();\n};\n\nconst quoteYamlKey = (key: string): string => {\n  if (/^[a-z0-9_-]+$/.test(key)) {\n    return key;\n  }\n\n  return `'${key}'`;\n};\n\nexport const formatPnpmWorkspaceYaml = (scope: Scope, pnpmVersion: string | null): string => {\n  const allowBuilds = getPnpmAllowBuilds(scope);\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n  const isPnpm11 = normalized ? semver.gte(normalized, PNPM11_MIN_VERSION) : true;\n\n  const lines = ['packages:', \"  - '.'\", ''];\n\n  if (isPnpm11) {\n    lines.push(\n      '# Allow day-0 @strapi/* npm publishes while keeping pnpm 11 supply-chain defaults for other deps.',\n      'minimumReleaseAgeExclude:',\n      \"  - '@strapi/*'\",\n      ''\n    );\n  }\n\n  lines.push('allowBuilds:');\n  for (const name of Object.keys(allowBuilds).sort()) {\n    lines.push(`  ${quoteYamlKey(name)}: true`);\n  }\n  lines.push('');\n\n  return lines.join('\\n');\n};\n\nconst hasParentPnpmWorkspace = async (rootPath: string): Promise<boolean> => {\n  let dir = join(rootPath, '..');\n\n  while (dir !== join(dir, '..')) {\n    if (await fse.pathExists(join(dir, 'pnpm-workspace.yaml'))) {\n      return true;\n    }\n\n    dir = join(dir, '..');\n  }\n\n  return false;\n};\n\nexport const writePnpmWorkspaceConfig = async (\n  scope: Scope,\n  pnpmVersion: string | null\n): Promise<void> => {\n  if (scope.packageManager !== 'pnpm' || !shouldUsePnpmWorkspaceConfig(pnpmVersion)) {\n    return;\n  }\n\n  const workspaceFile = join(scope.rootPath, 'pnpm-workspace.yaml');\n\n  if (await hasParentPnpmWorkspace(scope.rootPath)) {\n    return;\n  }\n\n  if (await fse.pathExists(workspaceFile)) {\n    return;\n  }\n\n  await fse.writeFile(workspaceFile, formatPnpmWorkspaceYaml(scope, pnpmVersion));\n};\n"],"names":["PNPM_WORKSPACE_CONFIG_MIN_VERSION","PNPM11_MIN_VERSION","PNPM_STRAPI_BUILD_PACKAGES","PNPM_SQLITE_BUILD_PACKAGE","shouldUsePnpmWorkspaceConfig","pnpmVersion","normalized","semver","coerce","version","gte","shouldUsePackageJsonPnpmConfig","lt","getPnpmBuildPackageNames","scope","packages","Set","database","client","add","Array","from","sort","getPnpmAllowBuilds","Object","fromEntries","map","name","getPnpmOnlyBuiltDependencies","existing","quoteYamlKey","key","test","formatPnpmWorkspaceYaml","allowBuilds","isPnpm11","lines","push","keys","join","hasParentPnpmWorkspace","rootPath","dir","fse","pathExists","writePnpmWorkspaceConfig","packageManager","workspaceFile","writeFile"],"mappings":";;;;;;;;;;;AAMA,2DACO,MAAMA,iCAAAA,GAAoC;AAEjD,qEACO,MAAMC,kBAAAA,GAAqB;AAElC;;UAGaC,0BAAAA,GAA6B;AACxC,IAAA,WAAA;AACA,IAAA,cAAA;AACA,IAAA,SAAA;AACA,IAAA;;AAGK,MAAMC,4BAA4B;AAElC,MAAMC,+BAA+B,CAACC,WAAAA,GAAAA;AAC3C,IAAA,MAAMC,aAAaD,WAAAA,GAAcE,uBAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AAEvE,IAAA,OAAOH,UAAAA,GAAaC,uBAAAA,CAAOG,GAAG,CAACJ,YAAYN,iCAAAA,CAAAA,GAAqC,IAAA;AAClF;AAEO,MAAMW,iCAAiC,CAACN,WAAAA,GAAAA;AAC7C,IAAA,MAAMC,aAAaD,WAAAA,GAAcE,uBAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AAEvE,IAAA,IAAI,CAACH,UAAAA,EAAY;QACf,OAAO,KAAA;AACT,IAAA;IAEA,OAAOC,uBAAAA,CAAOK,EAAE,CAACN,UAAAA,EAAYN,iCAAAA,CAAAA;AAC/B;AAEO,MAAMa,2BAA2B,CAACC,KAAAA,GAAAA;IACvC,MAAMC,QAAAA,GAAW,IAAIC,GAAAA,CAAYd,0BAAAA,CAAAA;AAEjC,IAAA,IAAIY,KAAAA,CAAMG,QAAQ,CAACC,MAAM,KAAK,QAAA,EAAU;AACtCH,QAAAA,QAAAA,CAASI,GAAG,CAAChB,yBAAAA,CAAAA;AACf,IAAA;AAEA,IAAA,OAAOiB,KAAAA,CAAMC,IAAI,CAACN,QAAAA,CAAAA,CAAUO,IAAI,EAAA;AAClC;AAEO,MAAMC,qBAAqB,CAACT,KAAAA,GAAAA;IACjC,OAAOU,MAAAA,CAAOC,WAAW,CAACZ,wBAAAA,CAAyBC,OAAOY,GAAG,CAAC,CAACC,IAAAA,GAAS;AAACA,YAAAA,IAAAA;AAAM,YAAA;AAAK,SAAA,CAAA,CAAA;AAItF;AAEO,MAAMC,4BAAAA,GAA+B,CAACd,KAAAA,EAAce,WAAqB,EAAE,GAAA;AAChF,IAAA,OAAOT,KAAAA,CAAMC,IAAI,CAAC,IAAIL,GAAAA,CAAI;AAAIa,QAAAA,GAAAA,QAAAA;WAAahB,wBAAAA,CAAyBC,KAAAA;AAAO,KAAA,CAAA,CAAA,CAAGQ,IAAI,EAAA;AACpF;AAEA,MAAMQ,eAAe,CAACC,GAAAA,GAAAA;IACpB,IAAI,eAAA,CAAgBC,IAAI,CAACD,GAAAA,CAAAA,EAAM;QAC7B,OAAOA,GAAAA;AACT,IAAA;AAEA,IAAA,OAAO,CAAC,CAAC,EAAEA,GAAAA,CAAI,CAAC,CAAC;AACnB,CAAA;AAEO,MAAME,uBAAAA,GAA0B,CAACnB,KAAAA,EAAcT,WAAAA,GAAAA;AACpD,IAAA,MAAM6B,cAAcX,kBAAAA,CAAmBT,KAAAA,CAAAA;AACvC,IAAA,MAAMR,aAAaD,WAAAA,GAAcE,uBAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AACvE,IAAA,MAAM0B,WAAW7B,UAAAA,GAAaC,uBAAAA,CAAOG,GAAG,CAACJ,YAAYL,kBAAAA,CAAAA,GAAsB,IAAA;AAE3E,IAAA,MAAMmC,KAAAA,GAAQ;AAAC,QAAA,WAAA;AAAa,QAAA,SAAA;AAAW,QAAA;AAAG,KAAA;AAE1C,IAAA,IAAID,QAAAA,EAAU;AACZC,QAAAA,KAAAA,CAAMC,IAAI,CACR,mGAAA,EACA,2BAAA,EACA,iBAAA,EACA,EAAA,CAAA;AAEJ,IAAA;AAEAD,IAAAA,KAAAA,CAAMC,IAAI,CAAC,cAAA,CAAA;AACX,IAAA,KAAK,MAAMV,IAAAA,IAAQH,MAAAA,CAAOc,IAAI,CAACJ,WAAAA,CAAAA,CAAaZ,IAAI,EAAA,CAAI;QAClDc,KAAAA,CAAMC,IAAI,CAAC,CAAC,EAAE,EAAEP,YAAAA,CAAaH,IAAAA,CAAAA,CAAM,MAAM,CAAC,CAAA;AAC5C,IAAA;AACAS,IAAAA,KAAAA,CAAMC,IAAI,CAAC,EAAA,CAAA;IAEX,OAAOD,KAAAA,CAAMG,IAAI,CAAC,IAAA,CAAA;AACpB;AAEA,MAAMC,yBAAyB,OAAOC,QAAAA,GAAAA;IACpC,IAAIC,GAAAA,GAAMH,UAAKE,QAAAA,EAAU,IAAA,CAAA;IAEzB,MAAOC,GAAAA,KAAQH,SAAAA,CAAKG,GAAAA,EAAK,IAAA,CAAA,CAAO;AAC9B,QAAA,IAAI,MAAMC,oBAAAA,CAAIC,UAAU,CAACL,SAAAA,CAAKG,KAAK,qBAAA,CAAA,CAAA,EAAyB;YAC1D,OAAO,IAAA;AACT,QAAA;AAEAA,QAAAA,GAAAA,GAAMH,UAAKG,GAAAA,EAAK,IAAA,CAAA;AAClB,IAAA;IAEA,OAAO,KAAA;AACT,CAAA;AAEO,MAAMG,wBAAAA,GAA2B,OACtC/B,KAAAA,EACAT,WAAAA,GAAAA;AAEA,IAAA,IAAIS,MAAMgC,cAAc,KAAK,MAAA,IAAU,CAAC1C,6BAA6BC,WAAAA,CAAAA,EAAc;AACjF,QAAA;AACF,IAAA;AAEA,IAAA,MAAM0C,aAAAA,GAAgBR,SAAAA,CAAKzB,KAAAA,CAAM2B,QAAQ,EAAE,qBAAA,CAAA;AAE3C,IAAA,IAAI,MAAMD,sBAAAA,CAAuB1B,KAAAA,CAAM2B,QAAQ,CAAA,EAAG;AAChD,QAAA;AACF,IAAA;AAEA,IAAA,IAAI,MAAME,oBAAAA,CAAIC,UAAU,CAACG,aAAAA,CAAAA,EAAgB;AACvC,QAAA;AACF,IAAA;AAEA,IAAA,MAAMJ,oBAAAA,CAAIK,SAAS,CAACD,aAAAA,EAAed,wBAAwBnB,KAAAA,EAAOT,WAAAA,CAAAA,CAAAA;AACpE;;;;;;;;;;;;;;"}

package/dist/utils/pnpm-config.mjs

@@ -0,0 +1,96 @@
+import { join } from 'node:path';
+import fse from 'fs-extra';
+import semver from 'semver';
+
+/** allowBuilds in pnpm-workspace.yaml (pnpm >= 10.26). */ const PNPM_WORKSPACE_CONFIG_MIN_VERSION = '10.26.0';
+/** pnpm 11 reads project settings from pnpm-workspace.yaml only. */ const PNPM11_MIN_VERSION = '11.0.0';
+/**
+ * Native / tooling packages Strapi needs to run postinstall scripts for (admin build, upload, sqlite).
+ */ const PNPM_STRAPI_BUILD_PACKAGES = [
+    '@swc/core',
+    'core-js-pure',
+    'esbuild',
+    'sharp'
+];
+const PNPM_SQLITE_BUILD_PACKAGE = 'better-sqlite3';
+const shouldUsePnpmWorkspaceConfig = (pnpmVersion)=>{
+    const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;
+    return normalized ? semver.gte(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION) : true;
+};
+const shouldUsePackageJsonPnpmConfig = (pnpmVersion)=>{
+    const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;
+    if (!normalized) {
+        return false;
+    }
+    return semver.lt(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION);
+};
+const getPnpmBuildPackageNames = (scope)=>{
+    const packages = new Set(PNPM_STRAPI_BUILD_PACKAGES);
+    if (scope.database.client === 'sqlite') {
+        packages.add(PNPM_SQLITE_BUILD_PACKAGE);
+    }
+    return Array.from(packages).sort();
+};
+const getPnpmAllowBuilds = (scope)=>{
+    return Object.fromEntries(getPnpmBuildPackageNames(scope).map((name)=>[
+            name,
+            true
+        ]));
+};
+const getPnpmOnlyBuiltDependencies = (scope, existing = [])=>{
+    return Array.from(new Set([
+        ...existing,
+        ...getPnpmBuildPackageNames(scope)
+    ])).sort();
+};
+const quoteYamlKey = (key)=>{
+    if (/^[a-z0-9_-]+$/.test(key)) {
+        return key;
+    }
+    return `'${key}'`;
+};
+const formatPnpmWorkspaceYaml = (scope, pnpmVersion)=>{
+    const allowBuilds = getPnpmAllowBuilds(scope);
+    const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;
+    const isPnpm11 = normalized ? semver.gte(normalized, PNPM11_MIN_VERSION) : true;
+    const lines = [
+        'packages:',
+        "  - '.'",
+        ''
+    ];
+    if (isPnpm11) {
+        lines.push('# Allow day-0 @strapi/* npm publishes while keeping pnpm 11 supply-chain defaults for other deps.', 'minimumReleaseAgeExclude:', "  - '@strapi/*'", '');
+    }
+    lines.push('allowBuilds:');
+    for (const name of Object.keys(allowBuilds).sort()){
+        lines.push(`  ${quoteYamlKey(name)}: true`);
+    }
+    lines.push('');
+    return lines.join('\n');
+};
+const hasParentPnpmWorkspace = async (rootPath)=>{
+    let dir = join(rootPath, '..');
+    while(dir !== join(dir, '..')){
+        if (await fse.pathExists(join(dir, 'pnpm-workspace.yaml'))) {
+            return true;
+        }
+        dir = join(dir, '..');
+    }
+    return false;
+};
+const writePnpmWorkspaceConfig = async (scope, pnpmVersion)=>{
+    if (scope.packageManager !== 'pnpm' || !shouldUsePnpmWorkspaceConfig(pnpmVersion)) {
+        return;
+    }
+    const workspaceFile = join(scope.rootPath, 'pnpm-workspace.yaml');
+    if (await hasParentPnpmWorkspace(scope.rootPath)) {
+        return;
+    }
+    if (await fse.pathExists(workspaceFile)) {
+        return;
+    }
+    await fse.writeFile(workspaceFile, formatPnpmWorkspaceYaml(scope, pnpmVersion));
+};
+
+export { PNPM11_MIN_VERSION, PNPM_SQLITE_BUILD_PACKAGE, PNPM_STRAPI_BUILD_PACKAGES, PNPM_WORKSPACE_CONFIG_MIN_VERSION, formatPnpmWorkspaceYaml, getPnpmAllowBuilds, getPnpmBuildPackageNames, getPnpmOnlyBuiltDependencies, shouldUsePackageJsonPnpmConfig, shouldUsePnpmWorkspaceConfig, writePnpmWorkspaceConfig };
+//# sourceMappingURL=pnpm-config.mjs.map

package/dist/utils/pnpm-config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm-config.mjs","sources":["../../src/utils/pnpm-config.ts"],"sourcesContent":["import { join } from 'node:path';\nimport fse from 'fs-extra';\nimport semver from 'semver';\n\nimport type { Scope } from '../types';\n\n/** allowBuilds in pnpm-workspace.yaml (pnpm >= 10.26). */\nexport const PNPM_WORKSPACE_CONFIG_MIN_VERSION = '10.26.0';\n\n/** pnpm 11 reads project settings from pnpm-workspace.yaml only. */\nexport const PNPM11_MIN_VERSION = '11.0.0';\n\n/**\n * Native / tooling packages Strapi needs to run postinstall scripts for (admin build, upload, sqlite).\n */\nexport const PNPM_STRAPI_BUILD_PACKAGES = [\n  '@swc/core',\n  'core-js-pure',\n  'esbuild',\n  'sharp',\n] as const;\n\nexport const PNPM_SQLITE_BUILD_PACKAGE = 'better-sqlite3';\n\nexport const shouldUsePnpmWorkspaceConfig = (pnpmVersion: string | null | undefined): boolean => {\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n\n  return normalized ? semver.gte(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION) : true;\n};\n\nexport const shouldUsePackageJsonPnpmConfig = (pnpmVersion: string | null | undefined): boolean => {\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n\n  if (!normalized) {\n    return false;\n  }\n\n  return semver.lt(normalized, PNPM_WORKSPACE_CONFIG_MIN_VERSION);\n};\n\nexport const getPnpmBuildPackageNames = (scope: Scope): string[] => {\n  const packages = new Set<string>(PNPM_STRAPI_BUILD_PACKAGES);\n\n  if (scope.database.client === 'sqlite') {\n    packages.add(PNPM_SQLITE_BUILD_PACKAGE);\n  }\n\n  return Array.from(packages).sort();\n};\n\nexport const getPnpmAllowBuilds = (scope: Scope): Record<string, true> => {\n  return Object.fromEntries(getPnpmBuildPackageNames(scope).map((name) => [name, true])) as Record<\n    string,\n    true\n  >;\n};\n\nexport const getPnpmOnlyBuiltDependencies = (scope: Scope, existing: string[] = []): string[] => {\n  return Array.from(new Set([...existing, ...getPnpmBuildPackageNames(scope)])).sort();\n};\n\nconst quoteYamlKey = (key: string): string => {\n  if (/^[a-z0-9_-]+$/.test(key)) {\n    return key;\n  }\n\n  return `'${key}'`;\n};\n\nexport const formatPnpmWorkspaceYaml = (scope: Scope, pnpmVersion: string | null): string => {\n  const allowBuilds = getPnpmAllowBuilds(scope);\n  const normalized = pnpmVersion ? semver.coerce(pnpmVersion)?.version : null;\n  const isPnpm11 = normalized ? semver.gte(normalized, PNPM11_MIN_VERSION) : true;\n\n  const lines = ['packages:', \"  - '.'\", ''];\n\n  if (isPnpm11) {\n    lines.push(\n      '# Allow day-0 @strapi/* npm publishes while keeping pnpm 11 supply-chain defaults for other deps.',\n      'minimumReleaseAgeExclude:',\n      \"  - '@strapi/*'\",\n      ''\n    );\n  }\n\n  lines.push('allowBuilds:');\n  for (const name of Object.keys(allowBuilds).sort()) {\n    lines.push(`  ${quoteYamlKey(name)}: true`);\n  }\n  lines.push('');\n\n  return lines.join('\\n');\n};\n\nconst hasParentPnpmWorkspace = async (rootPath: string): Promise<boolean> => {\n  let dir = join(rootPath, '..');\n\n  while (dir !== join(dir, '..')) {\n    if (await fse.pathExists(join(dir, 'pnpm-workspace.yaml'))) {\n      return true;\n    }\n\n    dir = join(dir, '..');\n  }\n\n  return false;\n};\n\nexport const writePnpmWorkspaceConfig = async (\n  scope: Scope,\n  pnpmVersion: string | null\n): Promise<void> => {\n  if (scope.packageManager !== 'pnpm' || !shouldUsePnpmWorkspaceConfig(pnpmVersion)) {\n    return;\n  }\n\n  const workspaceFile = join(scope.rootPath, 'pnpm-workspace.yaml');\n\n  if (await hasParentPnpmWorkspace(scope.rootPath)) {\n    return;\n  }\n\n  if (await fse.pathExists(workspaceFile)) {\n    return;\n  }\n\n  await fse.writeFile(workspaceFile, formatPnpmWorkspaceYaml(scope, pnpmVersion));\n};\n"],"names":["PNPM_WORKSPACE_CONFIG_MIN_VERSION","PNPM11_MIN_VERSION","PNPM_STRAPI_BUILD_PACKAGES","PNPM_SQLITE_BUILD_PACKAGE","shouldUsePnpmWorkspaceConfig","pnpmVersion","normalized","semver","coerce","version","gte","shouldUsePackageJsonPnpmConfig","lt","getPnpmBuildPackageNames","scope","packages","Set","database","client","add","Array","from","sort","getPnpmAllowBuilds","Object","fromEntries","map","name","getPnpmOnlyBuiltDependencies","existing","quoteYamlKey","key","test","formatPnpmWorkspaceYaml","allowBuilds","isPnpm11","lines","push","keys","join","hasParentPnpmWorkspace","rootPath","dir","fse","pathExists","writePnpmWorkspaceConfig","packageManager","workspaceFile","writeFile"],"mappings":";;;;AAMA,2DACO,MAAMA,iCAAAA,GAAoC;AAEjD,qEACO,MAAMC,kBAAAA,GAAqB;AAElC;;UAGaC,0BAAAA,GAA6B;AACxC,IAAA,WAAA;AACA,IAAA,cAAA;AACA,IAAA,SAAA;AACA,IAAA;;AAGK,MAAMC,4BAA4B;AAElC,MAAMC,+BAA+B,CAACC,WAAAA,GAAAA;AAC3C,IAAA,MAAMC,aAAaD,WAAAA,GAAcE,MAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AAEvE,IAAA,OAAOH,UAAAA,GAAaC,MAAAA,CAAOG,GAAG,CAACJ,YAAYN,iCAAAA,CAAAA,GAAqC,IAAA;AAClF;AAEO,MAAMW,iCAAiC,CAACN,WAAAA,GAAAA;AAC7C,IAAA,MAAMC,aAAaD,WAAAA,GAAcE,MAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AAEvE,IAAA,IAAI,CAACH,UAAAA,EAAY;QACf,OAAO,KAAA;AACT,IAAA;IAEA,OAAOC,MAAAA,CAAOK,EAAE,CAACN,UAAAA,EAAYN,iCAAAA,CAAAA;AAC/B;AAEO,MAAMa,2BAA2B,CAACC,KAAAA,GAAAA;IACvC,MAAMC,QAAAA,GAAW,IAAIC,GAAAA,CAAYd,0BAAAA,CAAAA;AAEjC,IAAA,IAAIY,KAAAA,CAAMG,QAAQ,CAACC,MAAM,KAAK,QAAA,EAAU;AACtCH,QAAAA,QAAAA,CAASI,GAAG,CAAChB,yBAAAA,CAAAA;AACf,IAAA;AAEA,IAAA,OAAOiB,KAAAA,CAAMC,IAAI,CAACN,QAAAA,CAAAA,CAAUO,IAAI,EAAA;AAClC;AAEO,MAAMC,qBAAqB,CAACT,KAAAA,GAAAA;IACjC,OAAOU,MAAAA,CAAOC,WAAW,CAACZ,wBAAAA,CAAyBC,OAAOY,GAAG,CAAC,CAACC,IAAAA,GAAS;AAACA,YAAAA,IAAAA;AAAM,YAAA;AAAK,SAAA,CAAA,CAAA;AAItF;AAEO,MAAMC,4BAAAA,GAA+B,CAACd,KAAAA,EAAce,WAAqB,EAAE,GAAA;AAChF,IAAA,OAAOT,KAAAA,CAAMC,IAAI,CAAC,IAAIL,GAAAA,CAAI;AAAIa,QAAAA,GAAAA,QAAAA;WAAahB,wBAAAA,CAAyBC,KAAAA;AAAO,KAAA,CAAA,CAAA,CAAGQ,IAAI,EAAA;AACpF;AAEA,MAAMQ,eAAe,CAACC,GAAAA,GAAAA;IACpB,IAAI,eAAA,CAAgBC,IAAI,CAACD,GAAAA,CAAAA,EAAM;QAC7B,OAAOA,GAAAA;AACT,IAAA;AAEA,IAAA,OAAO,CAAC,CAAC,EAAEA,GAAAA,CAAI,CAAC,CAAC;AACnB,CAAA;AAEO,MAAME,uBAAAA,GAA0B,CAACnB,KAAAA,EAAcT,WAAAA,GAAAA;AACpD,IAAA,MAAM6B,cAAcX,kBAAAA,CAAmBT,KAAAA,CAAAA;AACvC,IAAA,MAAMR,aAAaD,WAAAA,GAAcE,MAAAA,CAAOC,MAAM,CAACH,cAAcI,OAAAA,GAAU,IAAA;AACvE,IAAA,MAAM0B,WAAW7B,UAAAA,GAAaC,MAAAA,CAAOG,GAAG,CAACJ,YAAYL,kBAAAA,CAAAA,GAAsB,IAAA;AAE3E,IAAA,MAAMmC,KAAAA,GAAQ;AAAC,QAAA,WAAA;AAAa,QAAA,SAAA;AAAW,QAAA;AAAG,KAAA;AAE1C,IAAA,IAAID,QAAAA,EAAU;AACZC,QAAAA,KAAAA,CAAMC,IAAI,CACR,mGAAA,EACA,2BAAA,EACA,iBAAA,EACA,EAAA,CAAA;AAEJ,IAAA;AAEAD,IAAAA,KAAAA,CAAMC,IAAI,CAAC,cAAA,CAAA;AACX,IAAA,KAAK,MAAMV,IAAAA,IAAQH,MAAAA,CAAOc,IAAI,CAACJ,WAAAA,CAAAA,CAAaZ,IAAI,EAAA,CAAI;QAClDc,KAAAA,CAAMC,IAAI,CAAC,CAAC,EAAE,EAAEP,YAAAA,CAAaH,IAAAA,CAAAA,CAAM,MAAM,CAAC,CAAA;AAC5C,IAAA;AACAS,IAAAA,KAAAA,CAAMC,IAAI,CAAC,EAAA,CAAA;IAEX,OAAOD,KAAAA,CAAMG,IAAI,CAAC,IAAA,CAAA;AACpB;AAEA,MAAMC,yBAAyB,OAAOC,QAAAA,GAAAA;IACpC,IAAIC,GAAAA,GAAMH,KAAKE,QAAAA,EAAU,IAAA,CAAA;IAEzB,MAAOC,GAAAA,KAAQH,IAAAA,CAAKG,GAAAA,EAAK,IAAA,CAAA,CAAO;AAC9B,QAAA,IAAI,MAAMC,GAAAA,CAAIC,UAAU,CAACL,IAAAA,CAAKG,KAAK,qBAAA,CAAA,CAAA,EAAyB;YAC1D,OAAO,IAAA;AACT,QAAA;AAEAA,QAAAA,GAAAA,GAAMH,KAAKG,GAAAA,EAAK,IAAA,CAAA;AAClB,IAAA;IAEA,OAAO,KAAA;AACT,CAAA;AAEO,MAAMG,wBAAAA,GAA2B,OACtC/B,KAAAA,EACAT,WAAAA,GAAAA;AAEA,IAAA,IAAIS,MAAMgC,cAAc,KAAK,MAAA,IAAU,CAAC1C,6BAA6BC,WAAAA,CAAAA,EAAc;AACjF,QAAA;AACF,IAAA;AAEA,IAAA,MAAM0C,aAAAA,GAAgBR,IAAAA,CAAKzB,KAAAA,CAAM2B,QAAQ,EAAE,qBAAA,CAAA;AAE3C,IAAA,IAAI,MAAMD,sBAAAA,CAAuB1B,KAAAA,CAAM2B,QAAQ,CAAA,EAAG;AAChD,QAAA;AACF,IAAA;AAEA,IAAA,IAAI,MAAME,GAAAA,CAAIC,UAAU,CAACG,aAAAA,CAAAA,EAAgB;AACvC,QAAA;AACF,IAAA;AAEA,IAAA,MAAMJ,GAAAA,CAAIK,SAAS,CAACD,aAAAA,EAAed,wBAAwBnB,KAAAA,EAAOT,WAAAA,CAAAA,CAAAA;AACpE;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-strapi-app",
-  "version": "5.49.0",
+  "version": "5.50.0",
   "description": "Generate a new Strapi application.",
   "keywords": [
     "create-strapi-app",
@@ -51,7 +51,7 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
-    "@strapi/cloud-cli": "5.49.0",
+    "@strapi/cloud-cli": "5.50.0",
     "async-retry": "1.3.3",
     "chalk": "4.1.2",
     "commander": "8.3.0",
@@ -70,8 +70,8 @@
     "@types/async-retry": "^1",
     "@types/fs-extra": "11.0.4",
     "@types/inquirer": "9.0.9",
-    "eslint-config-custom": "5.49.0",
-    "tsconfig": "5.49.0"
+    "eslint-config-custom": "5.50.0",
+    "tsconfig": "5.50.0"
   },
   "engines": {
     "node": ">=20.0.0 <=26.x.x",

package/templates/example/config/admin.ts

@@ -2,18 +2,18 @@ import type { Core } from '@strapi/strapi';
 
 const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Admin => ({
   auth: {
-    secret: env('ADMIN_JWT_SECRET'),
+    secret: env('ADMIN_JWT_SECRET')!,
   },
   apiToken: {
-    salt: env('API_TOKEN_SALT'),
+    salt: env('API_TOKEN_SALT')!,
   },
   transfer: {
     token: {
-      salt: env('TRANSFER_TOKEN_SALT'),
+      salt: env('TRANSFER_TOKEN_SALT')!,
     },
   },
   secrets: {
-    encryptionKey: env('ENCRYPTION_KEY'),
+    encryptionKey: env('ENCRYPTION_KEY')!,
   },
   flags: {
     nps: env.bool('FLAG_NPS', true),

package/templates/example/config/api.ts

@@ -5,6 +5,10 @@ const config: Core.Config.Api = {
     defaultLimit: 25,
     maxLimit: 100,
     withCount: true,
+    strictParams: true,
+  },
+  documents: {
+    strictParams: true,
   },
 };
 

package/templates/example/config/database.ts

@@ -51,13 +51,21 @@ const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Database
     },
   };
 
+  if (!(client in connections)) {
+    throw new Error(
+      `Unsupported DATABASE_CLIENT: ${client}. Use "postgres", "mysql", or "sqlite".`
+    );
+  }
+
+  type DatabaseClient = keyof typeof connections;
+
   return {
     connection: {
-      client,
-      ...connections[client],
+      client: client as DatabaseClient,
+      ...connections[client as DatabaseClient],
       acquireConnectionTimeout: env.int('DATABASE_CONNECTION_TIMEOUT', 60000),
     },
-  };
+  } as Core.Config.Database;
 };
 
 export default config;

package/templates/example/config/plugins.ts

@@ -1,5 +1,44 @@
 import type { Core } from '@strapi/strapi';
 
-const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Plugin => ({});
+const allowedMediaTypes = [
+  'image/*',
+  'video/*',
+  'audio/*',
+  'application/pdf',
+  'application/msword',
+  'application/vnd.openxmlformats-officedocument.*',
+  'text/plain',
+  'text/csv',
+];
+
+const deniedExecutableTypes = [
+  'application/vnd.microsoft.portable-executable',
+  'application/x-msdownload',
+  'application/x-msdos-program',
+  'application/x-executable',
+  'application/x-dosexec',
+  'application/x-sh',
+  'text/x-shellscript',
+  'application/x-mach-binary',
+];
+
+const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Plugin => ({
+  'users-permissions': {
+    config: {
+      jwtManagement: 'refresh',
+      sessions: {
+        httpOnly: true,
+      },
+    },
+  },
+  upload: {
+    config: {
+      security: {
+        allowedTypes: allowedMediaTypes,
+        deniedTypes: deniedExecutableTypes,
+      },
+    },
+  },
+});
 
 export default config;

package/templates/example/config/server.ts

@@ -4,7 +4,10 @@ const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Server =>
   host: env('HOST', '0.0.0.0'),
   port: env.int('PORT', 1337),
   app: {
-    keys: env.array('APP_KEYS'),
+    keys: env.array('APP_KEYS')!,
+  },
+  webhooks: {
+    populateRelations: env.bool('WEBHOOKS_POPULATE_RELATIONS', false),
   },
 });
 

package/templates/example/tsconfig.json

@@ -4,7 +4,7 @@
     "moduleResolution": "Node",
     "lib": ["ES2020"],
     "target": "ES2019",
-    "strict": false,
+    "strict": true,
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
     "incremental": true,

package/templates/example-js/config/api.js

@@ -3,5 +3,9 @@ module.exports = {
     defaultLimit: 25,
     maxLimit: 100,
     withCount: true,
+    strictParams: true,
+  },
+  documents: {
+    strictParams: true,
   },
 };

package/templates/example-js/config/plugins.js

@@ -1 +1,40 @@
-module.exports = () => ({});
+const allowedMediaTypes = [
+  'image/*',
+  'video/*',
+  'audio/*',
+  'application/pdf',
+  'application/msword',
+  'application/vnd.openxmlformats-officedocument.*',
+  'text/plain',
+  'text/csv',
+];
+
+const deniedExecutableTypes = [
+  'application/vnd.microsoft.portable-executable',
+  'application/x-msdownload',
+  'application/x-msdos-program',
+  'application/x-executable',
+  'application/x-dosexec',
+  'application/x-sh',
+  'text/x-shellscript',
+  'application/x-mach-binary',
+];
+
+module.exports = () => ({
+  'users-permissions': {
+    config: {
+      jwtManagement: 'refresh',
+      sessions: {
+        httpOnly: true,
+      },
+    },
+  },
+  upload: {
+    config: {
+      security: {
+        allowedTypes: allowedMediaTypes,
+        deniedTypes: deniedExecutableTypes,
+      },
+    },
+  },
+});

package/templates/vanilla/config/admin.ts

@@ -2,18 +2,18 @@ import type { Core } from '@strapi/strapi';
 
 const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Admin => ({
   auth: {
-    secret: env('ADMIN_JWT_SECRET'),
+    secret: env('ADMIN_JWT_SECRET')!,
   },
   apiToken: {
-    salt: env('API_TOKEN_SALT'),
+    salt: env('API_TOKEN_SALT')!,
   },
   transfer: {
     token: {
-      salt: env('TRANSFER_TOKEN_SALT'),
+      salt: env('TRANSFER_TOKEN_SALT')!,
     },
   },
   secrets: {
-    encryptionKey: env('ENCRYPTION_KEY'),
+    encryptionKey: env('ENCRYPTION_KEY')!,
   },
   flags: {
     nps: env.bool('FLAG_NPS', true),

package/templates/vanilla/config/api.ts

@@ -5,6 +5,10 @@ const config: Core.Config.Api = {
     defaultLimit: 25,
     maxLimit: 100,
     withCount: true,
+    strictParams: true,
+  },
+  documents: {
+    strictParams: true,
   },
 };
 

package/templates/vanilla/config/database.ts

@@ -51,13 +51,21 @@ const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Database
     },
   };
 
+  if (!(client in connections)) {
+    throw new Error(
+      `Unsupported DATABASE_CLIENT: ${client}. Use "postgres", "mysql", or "sqlite".`
+    );
+  }
+
+  type DatabaseClient = keyof typeof connections;
+
   return {
     connection: {
-      client,
-      ...connections[client],
+      client: client as DatabaseClient,
+      ...connections[client as DatabaseClient],
       acquireConnectionTimeout: env.int('DATABASE_CONNECTION_TIMEOUT', 60000),
     },
-  };
+  } as Core.Config.Database;
 };
 
 export default config;