lowdefy 5.5.0 → 5.6.0

package/dist/commands/build/build.js

@@ -13,6 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import addCustomPluginsAsDeps from '../../utils/addCustomPluginsAsDeps.js';
+import ensurePnpmWorkspaceYaml from '../../utils/ensurePnpmWorkspaceYaml.js';
 import getServer from '../../utils/getServer.js';
 import installServer from '../../utils/installServer.js';
 import resetServerPackageJson from '../../utils/resetServerPackageJson.js';
@@ -38,6 +39,10 @@ async function build({ context }) {
         context,
         directory
     });
+    await ensurePnpmWorkspaceYaml({
+        context,
+        directory
+    });
     await installServer({
         context,
         directory

package/dist/commands/dev/dev.js

@@ -14,6 +14,7 @@
   limitations under the License.
 */ import addCustomPluginsAsDeps from '../../utils/addCustomPluginsAsDeps.js';
 import checkPortAvailable from '../../utils/checkPortAvailable.js';
+import ensurePnpmWorkspaceYaml from '../../utils/ensurePnpmWorkspaceYaml.js';
 import installServer from '../../utils/installServer.js';
 import resetServerPackageJson from '../../utils/resetServerPackageJson.js';
 import runDevServer from './runDevServer.js';
@@ -37,6 +38,10 @@ async function dev({ context }) {
         context,
         directory
     });
+    await ensurePnpmWorkspaceYaml({
+        context,
+        directory
+    });
     await installServer({
         context,
         directory

package/dist/utils/ensurePnpmWorkspaceYaml.js

@@ -0,0 +1,58 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+import { writeFile } from '@lowdefy/node-utils';
+import findPnpmWorkspaceRoot from './findPnpmWorkspaceRoot.js';
+// pnpm no longer reads the "pnpm" field in package.json, and pnpm 11 fails
+// installs with ERR_PNPM_IGNORED_BUILDS unless dependency build scripts are
+// allowed in pnpm-workspace.yaml. The key differs by version:
+// - packages is required by pnpm 9 and 10.0, and stops pnpm from treating the
+//   server as part of a parent workspace.
+// - onlyBuiltDependencies is read by early pnpm 10 versions.
+// - allowBuilds is read by pnpm >=10.29 and pnpm 11.
+const pnpmWorkspaceYaml = `packages:
+  - '.'
+onlyBuiltDependencies:
+  - better-sqlite3
+  - sharp
+allowBuilds:
+  better-sqlite3: true
+  sharp: true
+`;
+async function ensurePnpmWorkspaceYaml({ context, directory }) {
+    // Local mode runs against the monorepo packages; writing a nested
+    // pnpm-workspace.yaml there would corrupt the monorepo workspace.
+    if (context.lowdefyVersion === 'local') {
+        return;
+    }
+    const filePath = path.join(directory, 'pnpm-workspace.yaml');
+    // Keep existing files so users can allow builds for their own plugin deps.
+    if (fs.existsSync(filePath)) {
+        return;
+    }
+    // Apps inside a pnpm workspace install the server as part of that workspace —
+    // custom plugins pinned as workspace:* only resolve there, and the root's
+    // overrides, packageExtensions and build allowlists must keep applying.
+    // Writing packages: ['.'] would isolate the server and break all of that,
+    // so build allowlists stay the workspace root's responsibility.
+    const workspaceRoot = findPnpmWorkspaceRoot(path.dirname(directory));
+    if (workspaceRoot !== null) {
+        context.logger.debug(`Found pnpm workspace at ${workspaceRoot}; the server installs as part of that workspace.`);
+        return;
+    }
+    await writeFile(filePath, pnpmWorkspaceYaml);
+}
+export default ensurePnpmWorkspaceYaml;

package/dist/utils/findPnpmWorkspaceRoot.js

@@ -0,0 +1,29 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+// Mirrors how pnpm finds its workspace root: walk up from startDir and return
+// the first directory containing pnpm-workspace.yaml, or null if none exists.
+function findPnpmWorkspaceRoot(startDir) {
+    let dir = startDir;
+    while(dir !== path.dirname(dir)){
+        if (fs.existsSync(path.join(dir, 'pnpm-workspace.yaml'))) {
+            return dir;
+        }
+        dir = path.dirname(dir);
+    }
+    return null;
+}
+export default findPnpmWorkspaceRoot;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lowdefy",
-  "version": "5.5.0",
+  "version": "5.6.0",
   "license": "Apache-2.0",
   "description": "Lowdefy CLI",
   "homepage": "https://lowdefy.com",
@@ -32,10 +32,10 @@
   ],
   "exports": "./dist/index.js",
   "dependencies": {
-    "@lowdefy/errors": "5.5.0",
-    "@lowdefy/helpers": "5.5.0",
-    "@lowdefy/logger": "5.5.0",
-    "@lowdefy/node-utils": "5.5.0",
+    "@lowdefy/errors": "5.6.0",
+    "@lowdefy/helpers": "5.6.0",
+    "@lowdefy/logger": "5.6.0",
+    "@lowdefy/node-utils": "5.6.0",
     "axios": "1.8.2",
     "commander": "11.1.0",
     "decompress": "4.2.1",