pnpm 12.6.0 → 12.8.0

package/pn

@@ -8,6 +8,24 @@
 # itself first. The hop cap matches the kernel's ELOOP limit, so a cycle cannot
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
+#
+# Where no default path is compiled in, as on Nix, `command -p` searches PATH
+# instead, so the helpers run with node_modules and relative entries dropped from
+# PATH.
+caller_path_set=${PATH+set}
+caller_path=${PATH-}
+helper_path=
+rest=$caller_path:
+while [ -n "$rest" ]; do
+  dir=${rest%%:*}
+  rest=${rest#*:}
+  case "$dir" in
+    */node_modules/*|*/node_modules) ;;
+    /*) helper_path=${helper_path:+$helper_path:}$dir ;;
+  esac
+done
+# An empty PATH searches the current directory.
+PATH=${helper_path:-/}
 self=$0
 # MSYS and Cygwin can launch this with a native Windows path, which has no slash
 # for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
@@ -39,6 +57,7 @@ while [ -L "$self" ] && [ "$hops" -lt 40 ]; do
     *) self=${self%/*}/$link ;;
   esac
 done
+if [ -n "$caller_path_set" ]; then PATH=$caller_path; else unset PATH; fi
 # The walk has to end at a regular file. Running out of hops leaves $self a
 # symlink; a chain that changed under us can leave it dangling or a directory, and
 # a failed readlink leaves a trailing slash. Each case would take `pnpm` from the

package/pnpm

@@ -28,6 +28,24 @@ fi
 # `readlink` runs through `command -p`, which searches the system default path,
 # and directories come from `${self%/*}`, which runs nothing at all. The caller's
 # PATH therefore decides only which `node` runs, which is what it is for.
+#
+# Where no default path is compiled in, as on Nix, `command -p` searches PATH
+# instead, so the helpers run with node_modules and relative entries dropped from
+# PATH.
+caller_path_set=${PATH+set}
+caller_path=${PATH-}
+helper_path=
+rest=$caller_path:
+while [ -n "$rest" ]; do
+  dir=${rest%%:*}
+  rest=${rest#*:}
+  case "$dir" in
+    */node_modules/*|*/node_modules) ;;
+    /*) helper_path=${helper_path:+$helper_path:}$dir ;;
+  esac
+done
+# An empty PATH searches the current directory.
+PATH=${helper_path:-/}
 self=$0
 # MSYS and Cygwin can launch this with a native Windows path, which has no slash
 # for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
@@ -59,5 +77,14 @@ while [ -L "$self" ] && [ "$hops" -lt 40 ]; do
     *) self=${self%/*}/$link ;;
   esac
 done
+if [ -n "$caller_path_set" ]; then PATH=$caller_path; else unset PATH; fi
+# The walk has to end at a regular file. Running out of hops leaves $self a
+# symlink; a chain that changed under us can leave it dangling or a directory, and
+# a failed readlink leaves a trailing slash. Each case would take `bin/pnpm.mjs`
+# from the wrong directory.
+if [ -L "$self" ] || [ ! -f "$self" ]; then
+  echo "pnpm: could not resolve $0 to a regular file within 40 symlink hops." >&2
+  exit 1
+fi
 
 exec node "${self%/*}/bin/pnpm.mjs" "$@"

package/pnpx

@@ -8,6 +8,24 @@
 # itself first. The hop cap matches the kernel's ELOOP limit, so a cycle cannot
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
+#
+# Where no default path is compiled in, as on Nix, `command -p` searches PATH
+# instead, so the helpers run with node_modules and relative entries dropped from
+# PATH.
+caller_path_set=${PATH+set}
+caller_path=${PATH-}
+helper_path=
+rest=$caller_path:
+while [ -n "$rest" ]; do
+  dir=${rest%%:*}
+  rest=${rest#*:}
+  case "$dir" in
+    */node_modules/*|*/node_modules) ;;
+    /*) helper_path=${helper_path:+$helper_path:}$dir ;;
+  esac
+done
+# An empty PATH searches the current directory.
+PATH=${helper_path:-/}
 self=$0
 # MSYS and Cygwin can launch this with a native Windows path, which has no slash
 # for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
@@ -39,6 +57,7 @@ while [ -L "$self" ] && [ "$hops" -lt 40 ]; do
     *) self=${self%/*}/$link ;;
   esac
 done
+if [ -n "$caller_path_set" ]; then PATH=$caller_path; else unset PATH; fi
 # The walk has to end at a regular file. Running out of hops leaves $self a
 # symlink; a chain that changed under us can leave it dangling or a directory, and
 # a failed readlink leaves a trailing slash. Each case would take `pnpm` from the

package/pnx

@@ -8,6 +8,24 @@
 # itself first. The hop cap matches the kernel's ELOOP limit, so a cycle cannot
 # hang the script. Directories come from `${self%/*}` and `readlink` runs through
 # `command -p`, so the caller's `PATH` decides nothing here.
+#
+# Where no default path is compiled in, as on Nix, `command -p` searches PATH
+# instead, so the helpers run with node_modules and relative entries dropped from
+# PATH.
+caller_path_set=${PATH+set}
+caller_path=${PATH-}
+helper_path=
+rest=$caller_path:
+while [ -n "$rest" ]; do
+  dir=${rest%%:*}
+  rest=${rest#*:}
+  case "$dir" in
+    */node_modules/*|*/node_modules) ;;
+    /*) helper_path=${helper_path:+$helper_path:}$dir ;;
+  esac
+done
+# An empty PATH searches the current directory.
+PATH=${helper_path:-/}
 self=$0
 # MSYS and Cygwin can launch this with a native Windows path, which has no slash
 # for `${self%/*}` to strip. Only a drive letter or a UNC prefix marks one; a
@@ -39,6 +57,7 @@ while [ -L "$self" ] && [ "$hops" -lt 40 ]; do
     *) self=${self%/*}/$link ;;
   esac
 done
+if [ -n "$caller_path_set" ]; then PATH=$caller_path; else unset PATH; fi
 # The walk has to end at a regular file. Running out of hops leaves $self a
 # symlink; a chain that changed under us can leave it dangling or a directory, and
 # a failed readlink leaves a trailing slash. Each case would take `pnpm` from the