rolldown-pnpm-config 0.1.0

package/runtime.js

@@ -0,0 +1,54 @@
+import { excludeByRepo, resolveRootName } from "./runtime/ctx.js";
+import { applyEnforcement } from "./runtime/enforcement.js";
+import { STRATEGY_TABLE } from "./runtime/strategies/table.js";
+import { formatOverrideWarning, formatSecurityWarning } from "./runtime/warnings.js";
+
+//#region src/runtime/index.ts
+/**
+* Build the pnpm hooks from frozen base data + a field→strategy manifest.
+* Zero dependencies — bundled verbatim into the shipped pnpmfile.
+*
+* @remarks
+* `updateConfig` deliberately has no catch-and-fall-back-to-local guard: an
+* `error`-enforced divergence throws `EnforcementError`, which is meant to
+* propagate and fail the install. If a swallow-guard is ever added here, it MUST
+* rethrow `EnforcementError` (check `err instanceof EnforcementError` /
+* `err.name === "EnforcementError"`) rather than fall back to the local config.
+*
+* @public
+*/
+function createHooks(base, manifest, name) {
+	return { updateConfig(config) {
+		const ctx = { rootName: resolveRootName(config) };
+		const out = { ...config };
+		const allOverrides = [];
+		const allSecurity = [];
+		for (const [field, entry] of Object.entries(manifest)) {
+			const strategy = STRATEGY_TABLE[entry.strategy];
+			if (!strategy) continue;
+			const result = strategy(base[field], config[field], ctx);
+			let merged = result.merged;
+			const byRepo = entry.options?.excludeByRepo;
+			if (byRepo && Array.isArray(merged)) merged = excludeByRepo(merged, ctx, byRepo);
+			const named = result.divergences.map((d) => d.setting === "" ? {
+				...d,
+				setting: field
+			} : d);
+			const { value, overrides, security } = applyEnforcement(field, {
+				merged,
+				divergences: named
+			}, entry.enforcement);
+			allOverrides.push(...overrides);
+			allSecurity.push(...security);
+			if (value !== void 0 && !(typeof value === "object" && value !== null && Object.keys(value).length === 0)) out[field] = value;
+		}
+		const ob = formatOverrideWarning(allOverrides, name);
+		if (ob) console.warn(ob);
+		const sb = formatSecurityWarning(allSecurity, name);
+		if (sb) console.warn(sb);
+		return out;
+	} };
+}
+
+//#endregion
+export { createHooks };

package/tsdoc-metadata.json

@@ -0,0 +1,11 @@
+// This file is read by tools that parse documentation comments conforming to the TSDoc standard.
+// It should be published with your NPM package.  It should not be tracked by Git.
+{
+  "tsdocVersion": "0.12",
+  "toolPackages": [
+    {
+      "packageName": "@microsoft/api-extractor",
+      "packageVersion": "7.58.9"
+    }
+  ]
+}

package/virtual.d.ts

@@ -0,0 +1,18 @@
+// Ambient module declarations for the virtual modules served by PnpmConfigPlugin.
+//
+// Consumers opt into these types with a single reference directive in their build
+// entry or a types/*.d.ts file:
+//
+//   /// <reference types="rolldown-pnpm-config/virtual" />
+//
+// After that, imports from the virtual module paths type-check with no additional
+// per-module boilerplate.
+
+declare module "rolldown-pnpm-config/virtual/pnpmfile" {
+	import type { PnpmHooks } from "rolldown-pnpm-config/runtime";
+	export const hooks: PnpmHooks;
+}
+
+declare module "rolldown-pnpm-config/virtual/catalogs" {
+	export const catalogs: Map<string, Map<string, string>>;
+}