pnpm-workspace.yaml

packages:
  - 'apps/*'
  - 'packages/*'

# Whitelist of native deps whose postinstall scripts we permit.
# strictDepBuilds defaults to true as of pnpm 11; kept explicit so it also
# fails closed on pnpm 10.
# (mediasoup still requires python+pip to build the worker locally; ship a
# prebuilt mediasoup-worker binary in deploy artifacts to skip that.)
strictDepBuilds: true
allowBuilds:
  argon2: true
  # drizzle-orm declares better-sqlite3 as a peer dep, so pnpm installs
  # it even though we use the libsql driver. Allow its postinstall so
  # pnpm doesn't warn; we never actually load the .node binding.
  better-sqlite3: true
  esbuild: true
  mediasoup: true

# Refuse versions published less than 24h ago. Catches compromised releases
# during the window where a malicious publish hasn't been detected yet.
# Bump to 10080 (1 week) if same-day upgrades aren't needed. Renovate is
# configured with `minimumReleaseAge: 3 days` so it never proposes a bump
# that would fail this check at install time.
minimumReleaseAge: 1440

# Force a single @libsql/client version repo-wide. drizzle-orm's peer-dep
# resolution otherwise instantiates two drizzle copies (one parametrized
# per libsql version found in the graph), and TS sees them as different
# types ("Type '...drizzle-orm@x/y/Column' is not assignable to ...").
overrides:
  '@libsql/client': '0.17.4'

# pnpm 10's `deploy` command requires workspace packages to be injected
# (hardlinked into the deploy node_modules) instead of symlinked, so the
# deployed artifact is self-contained outside the monorepo. Without this
# flag pnpm errors with ERR_PNPM_DEPLOY_NONINJECTED_WORKSPACE.
injectWorkspacePackages: true

# Bootstrap the pnpm version pinned by `packageManager` in package.json,
# so contributors don't have to run corepack themselves. CI already
# defers to packageManager (see .github/workflows/ci.yml).
managePackageManagerVersions: true