overmux 0.0.7 → 0.0.8

package/dist/docs/200-getting-started/100-install-and-run-overmux.md

@@ -21,7 +21,7 @@ First you need to install the `overmux` CLI.
 Prerequisites:
 
 - [Node.js 22](https://nodejs.org/en/download) or newer
-- [pnpm 10](https://pnpm.io/installation) or newer
+- [pnpm 10.5.0](https://pnpm.io/installation) or newer
 
 Install Overmux globally:
 

package/dist/docs/400-reference/700-cli/050-init.md

@@ -10,6 +10,8 @@ overmux init
 
 The application is created in `$XDG_CONFIG_HOME/overmux` (default `~/.config/overmux`). See [storage locations](../300-storage-locations.md) for directory defaults and overrides.
 
-The command validates the toolchain before writing files. When Mise is installed, it must be [activated in the shell](https://mise.jdx.dev/getting-started.html#activate-mise); the generated `mise.toml` pins Node 22, pnpm 10, and the latest published Overmux version. Without Mise, pnpm 10 or newer must already be available and `mise.toml` is omitted.
+The command validates the toolchain before writing files. When Mise is installed, it must be [activated in the shell](https://mise.jdx.dev/getting-started.html#activate-mise); the generated `mise.toml` pins Node 22, pnpm 10, and the latest published Overmux version. Without Mise, pnpm 10.5.0 or newer must already be available and `mise.toml` is omitted.
 
 The initializer pins the exact latest published `overmux` version in `package.json`, installs dependencies, generates `pnpm-lock.yaml`, and runs `overmux check`. Existing scaffold files cause the command to fail without changing them. Unrelated files are preserved.
+
+The generated `pnpm-workspace.yaml` allows only `node-pty` to run dependency build scripts, including when you later add `@overmux/tmux`. This approval is project-local; global pnpm settings are unchanged. On Linux, building `node-pty` still requires `node-gyp`, Python, and a native compiler toolchain, which `overmux init` does not install.

package/docs/200-getting-started/100-install-and-run-overmux.md

@@ -21,7 +21,7 @@ First you need to install the `overmux` CLI.
 Prerequisites:
 
 - [Node.js 22](https://nodejs.org/en/download) or newer
-- [pnpm 10](https://pnpm.io/installation) or newer
+- [pnpm 10.5.0](https://pnpm.io/installation) or newer
 
 Install Overmux globally:
 

package/docs/400-reference/700-cli/050-init.md

@@ -10,6 +10,8 @@ overmux init
 
 The application is created in `$XDG_CONFIG_HOME/overmux` (default `~/.config/overmux`). See [storage locations](../300-storage-locations.md) for directory defaults and overrides.
 
-The command validates the toolchain before writing files. When Mise is installed, it must be [activated in the shell](https://mise.jdx.dev/getting-started.html#activate-mise); the generated `mise.toml` pins Node 22, pnpm 10, and the latest published Overmux version. Without Mise, pnpm 10 or newer must already be available and `mise.toml` is omitted.
+The command validates the toolchain before writing files. When Mise is installed, it must be [activated in the shell](https://mise.jdx.dev/getting-started.html#activate-mise); the generated `mise.toml` pins Node 22, pnpm 10, and the latest published Overmux version. Without Mise, pnpm 10.5.0 or newer must already be available and `mise.toml` is omitted.
 
 The initializer pins the exact latest published `overmux` version in `package.json`, installs dependencies, generates `pnpm-lock.yaml`, and runs `overmux check`. Existing scaffold files cause the command to fail without changing them. Unrelated files are preserved.
+
+The generated `pnpm-workspace.yaml` allows only `node-pty` to run dependency build scripts, including when you later add `@overmux/tmux`. This approval is project-local; global pnpm settings are unchanged. On Linux, building `node-pty` still requires `node-gyp`, Python, and a native compiler toolchain, which `overmux init` does not install.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "overmux",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "license": "MIT",
   "homepage": "https://github.com/richardgill/overmux",
   "repository": {
@@ -53,8 +53,7 @@
     "typescript": "5.9.3",
     "web-push": "3.6.7",
     "ws": "8.21.3",
-    "zod": "4.4.3",
-    "@overmux/keybindings": "0.0.5"
+    "@overmux/keybindings": "0.0.6"
   },
   "devDependencies": {
     "@playwright/test": "1.58.0",
@@ -67,6 +66,7 @@
     "react-dom": "19.2.3",
     "vite": "8.2.2",
     "vitest": "4.1.10",
+    "zod": "4.6.5",
     "@overmux/ai-context": "0.0.1",
     "@overmux/lib": "0.0.1",
     "@overmux/shared": "0.0.1",
@@ -75,7 +75,8 @@
   "peerDependencies": {
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "vite": "^8.2.1"
+    "vite": "^8.2.1",
+    "zod": "^4.6.5"
   },
   "publishConfig": {
     "access": "public"

package/src/internal/cli/commands/init-template.ts

@@ -7,6 +7,7 @@ export const initScaffoldPaths = [
   "mise.toml",
   "package.json",
   "pnpm-lock.yaml",
+  "pnpm-workspace.yaml",
   "overmux.config.ts",
   "src/server/index.ts",
   "src/ui/app.tsx",
@@ -31,6 +32,7 @@ const packageJson = (overmuxVersion: string) =>
         overmux: overmuxVersion,
         react: "^19.0.0",
         "react-dom": "^19.0.0",
+        zod: "^4.6.5",
       },
       devDependencies: {
         "@types/react": "^19.0.0",
@@ -65,6 +67,7 @@ pnpm = "10"
       }
     : {}),
   "package.json": packageJson(overmuxVersion),
+  "pnpm-workspace.yaml": "onlyBuiltDependencies:\n  - node-pty\n",
   "overmux.config.ts": `import { defineOvermuxConfig } from "overmux";
 
 import server from "./src/server/index";

package/src/internal/cli/commands/init.ts

@@ -112,13 +112,21 @@ const detectToolchain = (dependencies: InitDependencies): InitToolchain => {
   }
 
   const pnpm = dependencies.runCommand("pnpm", ["--version"]);
-  const major = Number.parseInt(pnpm.stdout.trim().split(".")[0] ?? "", 10);
-  if (!commandExists(pnpm) || pnpm.status !== 0 || !Number.isFinite(major)) {
-    throw new Error("pnpm 10 or newer is required when mise is not installed");
+  const [major = NaN, minor = NaN] = pnpm.stdout.trim().split(".").map(Number);
+  if (
+    !commandExists(pnpm) ||
+    pnpm.status !== 0 ||
+    !Number.isFinite(major) ||
+    !Number.isFinite(minor)
+  ) {
+    throw new Error(
+      "pnpm 10.5.0 or newer is required when mise is not installed",
+    );
   }
-  if (major < 10) {
+  // pnpm 10.5 introduced build approval settings in pnpm-workspace.yaml.
+  if (major < 10 || (major === 10 && minor < 5)) {
     throw new Error(
-      `pnpm 10 or newer is required when mise is not installed (found ${pnpm.stdout.trim()})`,
+      `pnpm 10.5.0 or newer is required when mise is not installed (found ${pnpm.stdout.trim()})`,
     );
   }
   return "pnpm";
@@ -161,8 +169,10 @@ const runProjectCommand = ({
   }
 };
 
+// The generated workspace isolates the project and supplies its build allowlist.
+// --ignore-workspace would also ignore that allowlist.
 const pnpmCommands = [
-  ["install", "--ignore-workspace"],
+  ["install"],
   ["exec", "overmux", "check", "--config", "./overmux.config.ts"],
 ] as const;