pmsec 0.7.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmsec",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "publishConfig": {
     "access": "public"
   },

package/src/tools/pnpm.mjs

@@ -1,4 +1,4 @@
-import { npmrcPath } from "../util/paths.mjs";
+import { pnpmRcPath } from "../util/paths.mjs";
 import { readSafe, writeAtomic } from "../util/io.mjs";
 import { readKey, setKey, removeKey } from "../util/lines.mjs";
 import { readExtras, applyExtras, removeExtras } from "../util/extras.mjs";
@@ -9,15 +9,15 @@ export const key = "minimum-release-age";
 export const docs = "https://pnpm.io/settings#minimumreleaseage";
 export const minBin = [10, 6, 0];
 // `defaultSinceMajor`: pnpm major version where the value became the default.
-// Once detected, an absent line in `.npmrc` is still effectively in force, so
-// `read()` reports it as ok with `defaultEnforced: true`.
+// Once detected, an absent line in the rc file is still effectively in force,
+// so `read()` reports it as ok with `defaultEnforced: true`.
 export const extras = [
   { key: "trust-policy", expected: "no-downgrade", line: "trust-policy=no-downgrade" },
   { key: "block-exotic-subdeps", expected: "true", line: "block-exotic-subdeps=true", defaultSinceMajor: 11 },
   { key: "strict-dep-builds", expected: "true", line: "strict-dep-builds=true" }
 ];
 
-export function path(env, home) { return npmrcPath(env, home); }
+export function path(env, home, platform) { return pnpmRcPath(env, home, platform); }
 
 function pnpmVersion(env) {
   return detectVersion("pnpm", ["--version"], { env, overrideKey: "PMSEC_PNPM_VERSION" });
@@ -30,8 +30,8 @@ export function preflight(env) {
   return { ok: true, warn: true, version: v.raw, message: `pnpm ${v.raw} < ${minBin.join(".")}: minimum-release-age is silently ignored. Upgrade pnpm to enforce the cooldown.` };
 }
 
-export async function read(env, home) {
-  const p = path(env, home);
+export async function read(env, home, platform) {
+  const p = path(env, home, platform);
   const raw = await readSafe(p);
   const value = readKey(raw, key);
   const minutes = value === null ? null : Number(value);
@@ -51,8 +51,8 @@ export async function read(env, home) {
   };
 }
 
-export async function write(days, env, home) {
-  const p = path(env, home);
+export async function write(days, env, home, platform) {
+  const p = path(env, home, platform);
   const before = await readSafe(p);
   let after = setKey(before, key, `${key}=${days * 24 * 60}`);
   after = applyExtras(after, extras);
@@ -60,8 +60,8 @@ export async function write(days, env, home) {
   return { path: p, before, after };
 }
 
-export async function unset(env, home) {
-  const p = path(env, home);
+export async function unset(env, home, platform) {
+  const p = path(env, home, platform);
   const before = await readSafe(p);
   const cooldown = removeKey(before, key);
   const ex = removeExtras(cooldown.text, extras);

package/src/util/paths.mjs

@@ -5,6 +5,20 @@ export function npmrcPath(env = process.env, home = homedir()) {
   return env.NPM_CONFIG_USERCONFIG || join(home, ".npmrc");
 }
 
+// pnpm reads its global rc from a dedicated location separate from ~/.npmrc.
+// Writing pnpm-only keys here keeps npm from warning (and, in npm 12, erroring)
+// about unknown user config. pnpm itself respects XDG_CONFIG_HOME on every OS.
+export function pnpmRcPath(env = process.env, home = homedir(), platform = process.platform) {
+  if (env.PMSEC_PNPM_CONFIG_FILE) return env.PMSEC_PNPM_CONFIG_FILE;
+  if (env.XDG_CONFIG_HOME) return join(env.XDG_CONFIG_HOME, "pnpm", "rc");
+  if (platform === "darwin") return join(home, "Library", "Preferences", "pnpm", "rc");
+  if (platform === "win32") {
+    const base = env.LOCALAPPDATA || join(home, "AppData", "Local");
+    return join(base, "pnpm", "config", "rc");
+  }
+  return join(home, ".config", "pnpm", "rc");
+}
+
 export function uvConfigPath(env = process.env, home = homedir(), platform = process.platform) {
   if (env.UV_CONFIG_FILE) return env.UV_CONFIG_FILE;
   if (platform === "win32") {