feat: configurational dependencies (#8915)

* feat: configuration dependencies * feat: remove configuration dependencies * feat: update configuration dependencies * feat: configuration dependencies fast check on repeat install * revert: comment * refactor: install configurational deps * refactor: install config deps * refactor: install config deps * test: config deps * test: config deps * docs: add changeset * test: loading a pnpmfile from config deps * fix: reading hooks after installing config deps * test: fix * test: fix * test: fix * test: fix * test: loading patch from config dep * fix: do not allow config deps w/o integrity checksum
2025-12-23 23:29:17 -05:00 · 2025-01-04 11:29:22 +01:00
parent b4b293a7be
commit 9591a18d96
20 changed files with 372 additions and 86 deletions
--- a/.changeset/healthy-falcons-jog.md
+++ b/.changeset/healthy-falcons-jog.md
@@ -0,0 +1,24 @@
+---
+"@pnpm/plugin-commands-installation": minor
+"@pnpm/workspace.state": minor
+"@pnpm/types": minor
+"@pnpm/deps.status": minor
+"pnpm": minor
+---
+
+Added support for a new type of dependencies called "configurational dependencies". These dependencies are installed before all the other types of dependencies (before "dependencies", "devDependencies", "optionalDependencies").
+
+Configurational dependencies cannot have dependencies of their own or lifecycle scripts. They should be added using exact version and the integrity checksum. Example:
+
+```json
+{
+  "pnpm": {
+    "configDependencies": {
+      "my-configs": "1.0.0+sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw=="
+    }
+  }
+}
+```
+
+Related RFC: [#8](https://github.com/pnpm/rfcs/pull/8).
+Related PR: [#8915](https://github.com/pnpm/pnpm/pull/8915).
--- a/config/config/src/index.ts
+++ b/config/config/src/index.ts
@@ -6,7 +6,6 @@ import { LAYOUT_VERSION } from '@pnpm/constants'
 import { PnpmError } from '@pnpm/error'
 import loadNpmConf from '@pnpm/npm-conf'
 import type npmTypes from '@pnpm/npm-conf/lib/types'
-import { requireHooks } from '@pnpm/pnpmfile'
 import { safeReadProjectManifestOnly } from '@pnpm/read-project-manifest'
 import { getCurrentBranch } from '@pnpm/git-utils'
 import { createMatcher } from '@pnpm/matcher'
@@ -472,9 +471,6 @@ export async function getConfig (opts: {

  pnpmConfig.workspaceConcurrency = getWorkspaceConcurrency(pnpmConfig.workspaceConcurrency)

-  if (!pnpmConfig.ignorePnpmfile) {
-    pnpmConfig.hooks = requireHooks(pnpmConfig.lockfileDir ?? pnpmConfig.dir, pnpmConfig)
-  }
  pnpmConfig.rootProjectManifestDir = pnpmConfig.lockfileDir ?? pnpmConfig.workspaceDir ?? pnpmConfig.dir
  pnpmConfig.rootProjectManifest = await safeReadProjectManifestOnly(pnpmConfig.rootProjectManifestDir) ?? undefined
  if (pnpmConfig.rootProjectManifest != null) {
--- a/deps/status/src/checkDepsStatus.ts
+++ b/deps/status/src/checkDepsStatus.ts
@@ -124,6 +124,12 @@ async function _checkDepsStatus (opts: CheckDepsStatusOptions): Promise<{ upToDa
      }
    }
  }
+  if ((rootProjectManifest?.pnpm?.configDependencies != null || workspaceState.configDependencies != null) && !equals(rootProjectManifest?.pnpm?.configDependencies ?? {}, workspaceState.configDependencies ?? {})) {
+    return {
+      upToDate: false,
+      issue: 'Configuration dependencies are not up to date',
+    }
+  }

  if (allProjects && workspaceDir) {
    if (!equals(
--- a/packages/types/src/package.ts
+++ b/packages/types/src/package.ts
@@ -130,6 +130,7 @@ export interface ProjectManifest extends BaseManifest {
  packageManager?: string
  workspaces?: string[]
  pnpm?: {
+    configDependencies?: Record<string, string>
    neverBuiltDependencies?: string[]
    onlyBuiltDependencies?: string[]
    onlyBuiltDependenciesFile?: string
--- a/pkg-manager/plugin-commands-installation/package.json
+++ b/pkg-manager/plugin-commands-installation/package.json
@@ -81,11 +81,14 @@
    "@pnpm/plugin-commands-env": "workspace:*",
    "@pnpm/plugin-commands-rebuild": "workspace:*",
    "@pnpm/pnpmfile": "workspace:*",
+    "@pnpm/read-modules-dir": "workspace:*",
+    "@pnpm/read-package-json": "workspace:*",
    "@pnpm/read-project-manifest": "workspace:*",
    "@pnpm/resolver-base": "workspace:*",
    "@pnpm/semver-diff": "catalog:",
    "@pnpm/sort-packages": "workspace:*",
    "@pnpm/store-connection-manager": "workspace:*",
+    "@pnpm/pick-registry-for-package": "workspace:*",
    "@pnpm/types": "workspace:*",
    "@pnpm/workspace.find-packages": "workspace:*",
    "@pnpm/workspace.pkgs-graph": "workspace:*",
@@ -100,6 +103,7 @@
    "ci-info": "catalog:",
    "enquirer": "catalog:",
    "is-subdir": "catalog:",
+    "get-npm-tarball-url": "catalog:",
    "load-json-file": "catalog:",
    "mem": "catalog:",
    "p-filter": "catalog:",
--- a/pkg-manager/plugin-commands-installation/src/installConfigDeps.ts
+++ b/pkg-manager/plugin-commands-installation/src/installConfigDeps.ts
@@ -0,0 +1,66 @@
+import path from 'path'
+import getNpmTarballUrl from 'get-npm-tarball-url'
+import { PnpmError } from '@pnpm/error'
+import { pickRegistryForPackage } from '@pnpm/pick-registry-for-package'
+import { readModulesDir } from '@pnpm/read-modules-dir'
+import rimraf from '@zkochan/rimraf'
+import { safeReadPackageJsonFromDir } from '@pnpm/read-package-json'
+import { type StoreController } from '@pnpm/package-store'
+import { type Registries } from '@pnpm/types'
+
+export async function installConfigDeps (configDeps: Record<string, string>, opts: {
+  registries: Registries
+  rootDir: string
+  store: StoreController
+}): Promise<void> {
+  const configModulesDir = path.join(opts.rootDir, 'node_modules/.pnpm-config')
+  const existingConfigDeps: string[] = await readModulesDir(configModulesDir) ?? []
+  await Promise.all(existingConfigDeps.map(async (existingConfigDep) => {
+    if (!configDeps[existingConfigDep]) {
+      await rimraf(path.join(configModulesDir, existingConfigDep))
+    }
+  }))
+  await Promise.all(Object.entries(configDeps).map(async ([pkgName, pkgSpec]) => {
+    const configDepPath = path.join(configModulesDir, pkgName)
+    const sepIndex = pkgSpec.indexOf('+')
+    if (sepIndex === -1) {
+      throw new PnpmError('CONFIG_DEP_NO_INTEGRITY', `Your config dependency called "${pkgName}" at "pnpm.configDependencies" doesn't have an integrity checksum`, {
+        hint: `All config dependencies should have their integrity checksum inlined in the version specifier. For example:
+
+{
+  "pnpm": {
+    "configDependencies": {
+      "my-config": "1.0.0+sha512-Xg0tn4HcfTijTwfDwYlvVCl43V6h4KyVVX2aEm4qdO/PC6L2YvzLHFdmxhoeSA3eslcE6+ZVXHgWwopXYLNq4Q=="
+    },
+  }
+}`,
+      })
+    }
+    const version = pkgSpec.substring(0, sepIndex)
+    const integrity = pkgSpec.substring(sepIndex + 1)
+    if (existingConfigDeps.includes(pkgName)) {
+      const configDepPkgJson = await safeReadPackageJsonFromDir(configDepPath)
+      if (configDepPkgJson == null || configDepPkgJson.name !== pkgName || configDepPkgJson.version !== version) {
+        await rimraf(configDepPath)
+      }
+    }
+    const registry = pickRegistryForPackage(opts.registries, pkgName)
+    const { fetching } = await opts.store.fetchPackage({
+      force: true,
+      lockfileDir: opts.rootDir,
+      pkg: {
+        id: `${pkgName}@${version}`,
+        resolution: {
+          tarball: getNpmTarballUrl(pkgName, version, { registry }),
+          integrity,
+        },
+      },
+    })
+    const { files: filesResponse } = await fetching()
+    await opts.store.importPackage(configDepPath, {
+      force: true,
+      requiresBuild: false,
+      filesResponse,
+    })
+  }))
+}
--- a/pkg-manager/plugin-commands-installation/src/installDeps.ts
+++ b/pkg-manager/plugin-commands-installation/src/installDeps.ts
@@ -12,6 +12,7 @@ import { filterDependenciesByType } from '@pnpm/manifest-utils'
 import { findWorkspacePackages } from '@pnpm/workspace.find-packages'
 import { type LockfileObject } from '@pnpm/lockfile.types'
 import { rebuildProjects } from '@pnpm/plugin-commands-rebuild'
+import { requireHooks } from '@pnpm/pnpmfile'
 import { createOrConnectStoreController, type CreateStoreControllerOptions } from '@pnpm/store-connection-manager'
 import { type IncludedDependencies, type Project, type ProjectsGraph, type ProjectRootDir, type PrepareExecutionEnv } from '@pnpm/types'
 import {
@@ -38,6 +39,7 @@ import {
  recursive,
 } from './recursive'
 import { createWorkspaceSpecs, updateToWorkspacePackagesFromManifest } from './updateWorkspaceDependencies'
+import { installConfigDeps } from './installConfigDeps'

 const OVERWRITE_UPDATE_OPTIONS = {
  allowNew: true,
@@ -166,6 +168,20 @@ when running add/update with the --workspace option')
    // @ts-expect-error
    opts['preserveWorkspaceProtocol'] = !opts.linkWorkspacePackages
  }
+  let store = await createOrConnectStoreController(opts)
+  if (opts.rootProjectManifest?.pnpm?.configDependencies) {
+    await installConfigDeps(opts.rootProjectManifest.pnpm.configDependencies, {
+      registries: opts.registries,
+      rootDir: opts.lockfileDir ?? opts.rootProjectManifestDir,
+      store: store.ctrl,
+    })
+  }
+  if (!opts.ignorePnpmfile && !opts.hooks) {
+    opts.hooks = requireHooks(opts.lockfileDir ?? opts.dir, opts)
+    if (opts.hooks.fetchers != null || opts.hooks.importPackage != null) {
+      store = await createOrConnectStoreController(opts)
+    }
+  }
  const includeDirect = opts.includeDirect ?? {
    dependencies: true,
    devDependencies: true,
@@ -223,6 +239,7 @@ when running add/update with the --workspace option')
          forcePublicHoistPattern,
          allProjectsGraph,
          selectedProjectsGraph,
+          storeControllerAndDir: store,
          workspaceDir: opts.workspaceDir,
        },
        opts.update ? 'update' : (params.length === 0 ? 'install' : 'add')
@@ -248,7 +265,6 @@ when running add/update with the --workspace option')
    manifest = {}
  }

-  const store = await createOrConnectStoreController(opts)
  const installOpts: Omit<MutateModulesOptions, 'allProjects'> = {
    ...opts,
    ...getOptionsFromRootManifest(opts.dir, manifest),
@@ -328,6 +344,7 @@ when running add/update with the --workspace option')
        workspaceDir: opts.workspaceDir ?? opts.lockfileDir ?? opts.dir,
        pnpmfileExists: opts.hooks?.calculatePnpmfileChecksum != null,
        filteredInstall: allProjects.length !== Object.keys(opts.selectedProjectsGraph ?? {}).length,
+        configDependencies: opts.rootProjectManifest?.pnpm?.configDependencies,
      })
    }
    return
@@ -381,6 +398,7 @@ when running add/update with the --workspace option')
        workspaceDir: opts.workspaceDir ?? opts.lockfileDir ?? opts.dir,
        pnpmfileExists: opts.hooks?.calculatePnpmfileChecksum != null,
        filteredInstall: allProjects.length !== Object.keys(opts.selectedProjectsGraph ?? {}).length,
+        configDependencies: opts.rootProjectManifest?.pnpm?.configDependencies,
      })
    }
  }
@@ -406,6 +424,7 @@ async function recursiveInstallThenUpdateWorkspaceState (
      workspaceDir: opts.workspaceDir,
      pnpmfileExists: opts.hooks?.calculatePnpmfileChecksum != null,
      filteredInstall: allProjects.length !== Object.keys(opts.selectedProjectsGraph ?? {}).length,
+      configDependencies: opts.rootProjectManifest?.pnpm?.configDependencies,
    })
  }
  return recursiveResult
--- a/pkg-manager/plugin-commands-installation/src/recursive.ts
+++ b/pkg-manager/plugin-commands-installation/src/recursive.ts
@@ -11,6 +11,7 @@ import { logger } from '@pnpm/logger'
 import { filterDependenciesByType } from '@pnpm/manifest-utils'
 import { createMatcherWithIndex } from '@pnpm/matcher'
 import { rebuild } from '@pnpm/plugin-commands-rebuild'
+import { type StoreController } from '@pnpm/package-store'
 import { requireHooks } from '@pnpm/pnpmfile'
 import { sortPackages } from '@pnpm/sort-packages'
 import { createOrConnectStoreController, type CreateStoreControllerOptions } from '@pnpm/store-connection-manager'
@@ -89,6 +90,10 @@ export type RecursiveOptions = CreateStoreControllerOptions & Pick<Config,
  selectedProjectsGraph: ProjectsGraph
  preferredVersions?: PreferredVersions
  pruneDirectDependencies?: boolean
+  storeControllerAndDir?: {
+    ctrl: StoreController
+    dir: string
+  }
 } & Partial<
 Pick<Config,
 | 'sort'
@@ -120,7 +125,7 @@ export async function recursive (

  const throwOnFail = throwOnCommandFail.bind(null, `pnpm recursive ${cmdFullName}`)

-  const store = await createOrConnectStoreController(opts)
+  const store = opts.storeControllerAndDir ?? await createOrConnectStoreController(opts)

  const workspacePackages: WorkspacePackages = arrayOfWorkspacePackagesToMap(allProjects) as WorkspacePackages
  const targetDependenciesField = getSaveType(opts)
--- a/pkg-manager/plugin-commands-installation/src/remove.ts
+++ b/pkg-manager/plugin-commands-installation/src/remove.ts
@@ -13,11 +13,13 @@ import { getAllDependenciesFromManifest } from '@pnpm/manifest-utils'
 import { createOrConnectStoreController, type CreateStoreControllerOptions } from '@pnpm/store-connection-manager'
 import { type DependenciesField, type ProjectRootDir } from '@pnpm/types'
 import { mutateModulesInSingleProject } from '@pnpm/core'
+import { requireHooks } from '@pnpm/pnpmfile'
 import pick from 'ramda/src/pick'
 import without from 'ramda/src/without'
 import renderHelp from 'render-help'
 import { getSaveType } from './getSaveType'
 import { recursive } from './recursive'
+import { installConfigDeps } from './installConfigDeps'

 class RemoveMissingDepsError extends PnpmError {
  constructor (
@@ -161,17 +163,31 @@ export async function handler (
    devDependencies: opts.dev !== false,
    optionalDependencies: opts.optional !== false,
  }
+  let store = await createOrConnectStoreController(opts)
+  if (opts.rootProjectManifest?.pnpm?.configDependencies) {
+    await installConfigDeps(opts.rootProjectManifest.pnpm.configDependencies, {
+      registries: opts.registries,
+      rootDir: opts.lockfileDir ?? opts.rootProjectManifestDir,
+      store: store.ctrl,
+    })
+  }
+  if (!opts.ignorePnpmfile) {
+    opts.hooks = requireHooks(opts.lockfileDir ?? opts.dir, opts)
+    if (opts.hooks.fetchers != null || opts.hooks.importPackage != null) {
+      store = await createOrConnectStoreController(opts)
+    }
+  }
  if (opts.recursive && (opts.allProjects != null) && (opts.selectedProjectsGraph != null) && opts.workspaceDir) {
    await recursive(opts.allProjects, params, {
      ...opts,
      allProjectsGraph: opts.allProjectsGraph!,
      include,
      selectedProjectsGraph: opts.selectedProjectsGraph,
+      storeControllerAndDir: store,
      workspaceDir: opts.workspaceDir,
    }, 'remove')
    return
  }
-  const store = await createOrConnectStoreController(opts)
  const removeOpts = Object.assign(opts, {
    ...getOptionsFromRootManifest(opts.rootProjectManifestDir, opts.rootProjectManifest ?? {}),
    linkWorkspacePackagesDepth: opts.linkWorkspacePackages === 'deep' ? Infinity : opts.linkWorkspacePackages ? 0 : -1,
--- a/pkg-manager/plugin-commands-installation/test/install.ts
+++ b/pkg-manager/plugin-commands-installation/test/install.ts
@@ -5,6 +5,7 @@ import { STORE_VERSION } from '@pnpm/constants'
 import { add, install } from '@pnpm/plugin-commands-installation'
 import { prepare, prepareEmpty } from '@pnpm/prepare'
 import { sync as rimraf } from '@zkochan/rimraf'
+import { sync as loadJsonFile } from 'load-json-file'
 import { DEFAULT_OPTS } from './utils'

 const describeOnLinuxOnly = process.platform === 'linux' ? describe : describe.skip
@@ -26,7 +27,7 @@ test('install does not fail when a new package is added', async () => {
    dir: process.cwd(),
  }, ['is-positive@1.0.0'])

-  const pkg = await import(path.resolve('package.json'))
+  const pkg = loadJsonFile<{ dependencies: Record<string, string> }>(path.resolve('package.json'))

  expect(pkg?.dependencies).toStrictEqual({ 'is-positive': '1.0.0' })
 })
--- a/pkg-manager/plugin-commands-installation/test/installConfigDeps.ts
+++ b/pkg-manager/plugin-commands-installation/test/installConfigDeps.ts
@@ -0,0 +1,118 @@
+import fs from 'fs'
+import { add, install } from '@pnpm/plugin-commands-installation'
+import { prepare } from '@pnpm/prepare'
+import { getIntegrity } from '@pnpm/registry-mock'
+import { type ProjectManifest } from '@pnpm/types'
+import { sync as loadJsonFile } from 'load-json-file'
+import { DEFAULT_OPTS } from './utils'
+
+test('configuration dependency is installed', async () => {
+  const rootProjectManifest: ProjectManifest = {
+    pnpm: {
+      configDependencies: {
+        '@pnpm.e2e/foo': `100.0.0+${getIntegrity('@pnpm.e2e/foo', '100.0.0')}`,
+      },
+    },
+  }
+  prepare(rootProjectManifest)
+
+  await install.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  })
+
+  {
+    const configDepManifest = loadJsonFile<{ name: string, version: string }>('node_modules/.pnpm-config/@pnpm.e2e/foo/package.json')
+    expect(configDepManifest.name).toBe('@pnpm.e2e/foo')
+    expect(configDepManifest.version).toBe('100.0.0')
+  }
+
+  // Dependency is updated
+  rootProjectManifest.pnpm!.configDependencies!['@pnpm.e2e/foo'] = `100.1.0+${getIntegrity('@pnpm.e2e/foo', '100.1.0')}`
+
+  await install.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  })
+
+  {
+    const configDepManifest = loadJsonFile<{ name: string, version: string }>('node_modules/.pnpm-config/@pnpm.e2e/foo/package.json')
+    expect(configDepManifest.name).toBe('@pnpm.e2e/foo')
+    expect(configDepManifest.version).toBe('100.1.0')
+  }
+
+  // Dependency is removed
+  rootProjectManifest.pnpm!.configDependencies = {}
+
+  await install.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  })
+
+  expect(fs.existsSync('node_modules/.pnpm-config/@pnpm.e2e/foo/package.json')).toBeFalsy()
+})
+
+test('patch from configuration dependency is applied', async () => {
+  const rootProjectManifest = {
+    pnpm: {
+      configDependencies: {
+        '@pnpm.e2e/has-patch-for-foo': `1.0.0+${getIntegrity('@pnpm.e2e/has-patch-for-foo', '1.0.0')}`,
+      },
+      patchedDependencies: {
+        '@pnpm.e2e/foo@100.0.0': 'node_modules/.pnpm-config/@pnpm.e2e/has-patch-for-foo/@pnpm.e2e__foo@100.0.0.patch',
+      },
+    },
+  }
+  prepare(rootProjectManifest)
+
+  await add.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  }, ['@pnpm.e2e/foo@100.0.0'])
+
+  expect(fs.existsSync('node_modules/@pnpm.e2e/foo/index.js')).toBeTruthy()
+})
+
+test('installation fails if the checksum of the config dependency is invalid', async () => {
+  const rootProjectManifest: ProjectManifest = {
+    pnpm: {
+      configDependencies: {
+        '@pnpm.e2e/foo': '100.0.0+sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==',
+      },
+    },
+  }
+  prepare(rootProjectManifest)
+
+  await expect(install.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  })).rejects.toThrow('Got unexpected checksum for')
+})
+
+test('installation fails if the config dependency does not have a checksum', async () => {
+  const rootProjectManifest: ProjectManifest = {
+    pnpm: {
+      configDependencies: {
+        '@pnpm.e2e/foo': '100.0.0',
+      },
+    },
+  }
+  prepare(rootProjectManifest)
+
+  await expect(install.handler({
+    ...DEFAULT_OPTS,
+    dir: process.cwd(),
+    rootProjectManifest,
+    rootProjectManifestDir: process.cwd(),
+  })).rejects.toThrow("doesn't have an integrity checksum")
+})
--- a/pkg-manager/plugin-commands-installation/test/miscRecursive.ts
+++ b/pkg-manager/plugin-commands-installation/test/miscRecursive.ts
@@ -774,6 +774,18 @@ test('pass readPackage with shared lockfile', async () => {
      },
    },
  ])
+  fs.writeFileSync('.pnpmfile.cjs', `
+module.exports = {
+  hooks: {
+    readPackage: (pkg) => ({
+      ...pkg,
+      dependencies: {
+        'is-positive': '1.0.0',
+      },
+    }),
+  },
+}
+`, 'utf8')

  await install.handler({
    ...DEFAULT_OPTS,
@@ -781,16 +793,6 @@ test('pass readPackage with shared lockfile', async () => {
    dir: process.cwd(),
    recursive: true,
    workspaceDir: process.cwd(),
-    hooks: {
-      readPackage: [
-        (pkg) => ({
-          ...pkg,
-          dependencies: {
-            'is-positive': '1.0.0',
-          },
-        }),
-      ],
-    },
  })

  projects['project-1'].has('is-positive')
--- a/pkg-manager/plugin-commands-installation/tsconfig.json
+++ b/pkg-manager/plugin-commands-installation/tsconfig.json
@@ -36,6 +36,9 @@
    {
      "path": "../../config/matcher"
    },
+    {
+      "path": "../../config/pick-registry-for-package"
+    },
    {
      "path": "../../dedupe/check"
    },
@@ -51,6 +54,9 @@
    {
      "path": "../../fs/graceful-fs"
    },
+    {
+      "path": "../../fs/read-modules-dir"
+    },
    {
      "path": "../../hooks/pnpmfile"
    },
@@ -75,6 +81,9 @@
    {
      "path": "../../pkg-manifest/manifest-utils"
    },
+    {
+      "path": "../../pkg-manifest/read-package-json"
+    },
    {
      "path": "../../pkg-manifest/read-project-manifest"
    },
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -55,8 +55,8 @@ catalogs:
      specifier: 0.0.0
      version: 0.0.0
    '@pnpm/registry-mock':
-      specifier: 3.46.0
-      version: 3.46.0
+      specifier: 3.48.0
+      version: 3.48.0
    '@pnpm/semver-diff':
      specifier: ^1.1.0
      version: 1.1.0
@@ -855,7 +855,7 @@ importers:
        version: link:../../pkg-manager/modules-yaml
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/types':
        specifier: workspace:*
        version: link:../../packages/types
@@ -889,7 +889,7 @@ importers:
    dependencies:
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/store.cafs':
        specifier: workspace:*
        version: link:../../store/cafs
@@ -964,7 +964,7 @@ importers:
    dependencies:
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/worker':
        specifier: workspace:*
        version: link:../../worker
@@ -1147,7 +1147,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@types/ramda':
        specifier: 'catalog:'
        version: 0.29.12
@@ -2341,7 +2341,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -2486,7 +2486,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-ipc-server':
        specifier: workspace:*
        version: link:../../__utils__/test-ipc-server
@@ -4138,7 +4138,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -4428,7 +4428,7 @@ importers:
        version: link:../../pkg-manifest/read-package-json
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/store-path':
        specifier: workspace:*
        version: link:../../store/store-path
@@ -4704,7 +4704,7 @@ importers:
        version: link:../read-projects-context
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/store-path':
        specifier: workspace:*
        version: link:../../store/store-path
@@ -5064,7 +5064,7 @@ importers:
        version: 'link:'
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -5158,6 +5158,9 @@ importers:
      '@pnpm/parse-wanted-dependency':
        specifier: workspace:*
        version: link:../../packages/parse-wanted-dependency
+      '@pnpm/pick-registry-for-package':
+        specifier: workspace:*
+        version: link:../../config/pick-registry-for-package
      '@pnpm/plugin-commands-env':
        specifier: workspace:*
        version: link:../../env/plugin-commands-env
@@ -5167,6 +5170,12 @@ importers:
      '@pnpm/pnpmfile':
        specifier: workspace:*
        version: link:../../hooks/pnpmfile
+      '@pnpm/read-modules-dir':
+        specifier: workspace:*
+        version: link:../../fs/read-modules-dir
+      '@pnpm/read-package-json':
+        specifier: workspace:*
+        version: link:../../pkg-manifest/read-package-json
      '@pnpm/read-project-manifest':
        specifier: workspace:*
        version: link:../../pkg-manifest/read-project-manifest
@@ -5221,6 +5230,9 @@ importers:
      enquirer:
        specifier: 'catalog:'
        version: 2.4.1
+      get-npm-tarball-url:
+        specifier: 'catalog:'
+        version: 2.1.0
      is-subdir:
        specifier: 'catalog:'
        version: 1.2.0
@@ -5266,7 +5278,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -5870,7 +5882,7 @@ importers:
        version: link:../pkg-manifest/read-project-manifest
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/run-npm':
        specifier: workspace:*
        version: link:../exec/run-npm
@@ -6186,7 +6198,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -6304,7 +6316,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-ipc-server':
        specifier: workspace:*
        version: link:../../__utils__/test-ipc-server
@@ -6897,7 +6909,7 @@ importers:
        version: link:../../pkg-manifest/read-package-json
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -6964,7 +6976,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/workspace.filter-packages-from-dir':
        specifier: workspace:*
        version: link:../../workspace/filter-packages-from-dir
@@ -7055,7 +7067,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@pnpm/test-fixtures':
        specifier: workspace:*
        version: link:../../__utils__/test-fixtures
@@ -7399,7 +7411,7 @@ importers:
        version: link:../../__utils__/prepare
      '@pnpm/registry-mock':
        specifier: 'catalog:'
-        version: 3.46.0(encoding@0.1.13)(typanion@3.14.0)
+        version: 3.48.0(encoding@0.1.13)(typanion@3.14.0)
      '@types/archy':
        specifier: 'catalog:'
        version: 0.0.33
@@ -8739,6 +8751,7 @@ packages:
  '@humanwhocodes/config-array@0.11.14':
    resolution: {integrity: sha512-3T8LkOmg45BV5FICb15QQMsyUSWrQ8AygVfC7ZG32zOalnqrilm018ZVCw0eapXux8FtA33q8PSRSstjee3jSg==}
    engines: {node: '>=10.10.0'}
+    deprecated: Use @eslint/config-array instead

  '@humanwhocodes/module-importer@1.0.1':
    resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
@@ -8746,6 +8759,7 @@ packages:

  '@humanwhocodes/object-schema@2.0.3':
    resolution: {integrity: sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA==}
+    deprecated: Use @eslint/object-schema instead

  '@isaacs/cliui@8.0.2':
    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
@@ -9116,8 +9130,8 @@ packages:
    resolution: {integrity: sha512-LFTWzfJbu6+l86bw/uUAsPU05n1oTqg6jzqyTXYDJPfVclqTfPnHiZoC1nvVvQlE7iVg3bhJ7SXg9IyzK7RWDQ==}
    engines: {node: '>=18.12'}

-  '@pnpm/registry-mock@3.46.0':
-    resolution: {integrity: sha512-MS8idSUQu9Ag3f/s33dnEQp0zJ+z4aU01VznAIn8FT/6NBvOulVCV+CqGZbOohemNNPth7LfIS13l2fZD12rOA==}
+  '@pnpm/registry-mock@3.48.0':
+    resolution: {integrity: sha512-5d5GFyz+DlGe50SLJjMWcEKkzr7EvbKQq71hwcjOUAr3+mPEz7+Ul+wFkw0gJ/3mYjk4pmFZerP8qLdd8SBZPQ==}
    engines: {node: '>=10.13'}
    hasBin: true

@@ -10807,6 +10821,7 @@ packages:

  eslint-config-standard-with-typescript@39.1.1:
    resolution: {integrity: sha512-t6B5Ep8E4I18uuoYeYxINyqcXb2UbC0SOOTxRtBSt2JUs+EzeXbfe2oaiPs71AIdnoWhXDO2fYOHz8df3kV84A==}
+    deprecated: Please use eslint-config-love, instead.
    peerDependencies:
      '@typescript-eslint/eslint-plugin': ^6.4.0
      eslint: ^8.0.1
@@ -10911,6 +10926,7 @@ packages:
  eslint@8.57.0:
    resolution: {integrity: sha512-dZ6+mexnaTIbSBZWgou51U6OmzIhYM2VcNdtiTtI7qPNZm35Akpr0f6vtw3w1Kmn5PYo+tZVfh13WrhpS6oLqQ==}
    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+    deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options.
    hasBin: true

  esm@3.2.25:
@@ -11327,6 +11343,7 @@ packages:

  glob@7.2.3:
    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
+    deprecated: Glob versions prior to v9 are no longer supported

  glob@8.1.0:
    resolution: {integrity: sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==}
@@ -11592,6 +11609,7 @@ packages:

  inflight@1.0.6:
    resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
+    deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

  inherits@2.0.4:
    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
@@ -12389,10 +12407,6 @@ packages:
    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
    engines: {node: '>= 0.6'}

-  mime-db@1.53.0:
-    resolution: {integrity: sha512-oHlN/w+3MQ3rba9rqFr6V/ypF10LSkdwUysQL7GkXoTgIWeV+tcXGA852TBxH+gsh8UWoyhR1hKcoMJTuWflpg==}
-    engines: {node: '>= 0.6'}
-
  mime-types@2.1.35:
    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
    engines: {node: '>= 0.6'}
@@ -13135,9 +13149,6 @@ packages:
    resolution: {integrity: sha512-v4Bl6I3f2kJfr5o80ShABNHAokIgY+wFDTQfE+X3zWYgSGQOCBeYptLZUpoOALBqO5EawmDN/tjTldJesd0ujQ==}
    engines: {node: '>=10'}

-  psl@1.9.0:
-    resolution: {integrity: sha512-E/ZsdU4HLs/68gYzgGTkMicWTLPdAftJLfJFlLUAAKZGkStNU72sZjT66SnMDVOfOWY/YAoiD7Jxa9iHvngcag==}
-
  publish-packed@4.1.2:
    resolution: {integrity: sha512-jfgaVcWMSIY8Bw2iVVcSo25SFI72x9LwuWsAxrBcm7ZrdbLz2Y8gErhlEX7VZxJZeiCihcR7XAOyjU95MywFVw==}
    engines: {node: '>=12.10'}
@@ -13171,9 +13182,6 @@ packages:
    resolution: {integrity: sha512-qxXIEh4pCGfHICj1mAJQ2/2XVZkjCDTcEgfoSQxc/fYivUZxTkk7L3bDBJSoNrEzXI17oUO5Dp07ktqE5KzczA==}
    engines: {node: '>=0.6'}

-  querystringify@2.2.0:
-    resolution: {integrity: sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ==}
-
  queue-microtask@1.2.3:
    resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}

@@ -13900,6 +13908,13 @@ packages:
  tinylogic@2.0.0:
    resolution: {integrity: sha512-dljTkiLLITtsjqBvTA1MRZQK/sGP4kI3UJKc3yA9fMzYbMF2RhcN04SeROVqJBIYYOoJMM8u0WDnhFwMSFQotw==}

+  tldts-core@6.1.70:
+    resolution: {integrity: sha512-RNnIXDB1FD4T9cpQRErEqw6ZpjLlGdMOitdV+0xtbsnwr4YFka1zpc7D4KD+aAn8oSG5JyFrdasZTE04qDE9Yg==}
+
+  tldts@6.1.70:
+    resolution: {integrity: sha512-/W1YVgYVJd9ZDjey5NXadNh0mJXkiUMUue9Zebd0vpdo1sU+H4zFFTaJ1RKD4N6KFoHfcXy6l+Vu7bh+bdWCzA==}
+    hasBin: true
+
  tmp@0.0.33:
    resolution: {integrity: sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==}
    engines: {node: '>=0.6.0'}
@@ -13934,9 +13949,9 @@ packages:
    resolution: {integrity: sha512-WBx8Uy5TLtOSRtIq+M03/sKDrXCLHxwDcquSP2c43Le03/9serjQBIztjRz6FkJez9D/hleyAXTBGLwwZUw9lA==}
    hasBin: true

-  tough-cookie@4.1.4:
-    resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
-    engines: {node: '>=6'}
+  tough-cookie@5.0.0:
+    resolution: {integrity: sha512-FRKsF7cz96xIIeMZ82ehjC3xW2E+O2+v11udrDYewUbszngYhsGa8z6YUMMzO9QJZzzyd0nGGXnML/TReX6W8Q==}
+    engines: {node: '>=16'}

  tr46@0.0.3:
    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
@@ -14180,10 +14195,6 @@ packages:
    resolution: {integrity: sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==}
    engines: {node: '>= 4.0.0'}

-  universalify@0.2.0:
-    resolution: {integrity: sha512-CJ1QgKmNg3CwvAv/kOFmtnEN05f0D/cn9QntgNOQlQF9dgvVTHj3t+8JPdjqawCHk7V/KA+fbUqzZ9XWhcqPUg==}
-    engines: {node: '>= 4.0.0'}
-
  universalify@2.0.1:
    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
    engines: {node: '>= 10.0.0'}
@@ -14208,9 +14219,6 @@ packages:
  uri-js@4.4.1:
    resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}

-  url-parse@1.5.10:
-    resolution: {integrity: sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==}
-
  utf8-byte-length@1.0.5:
    resolution: {integrity: sha512-Xn0w3MtiQ6zoz2vFyUVruaCL53O/DwUvkEeOvj+uulMm0BkUGYWmBYVyElqZaSLhY6ZD0ulfU3aBra2aVT4xfA==}

@@ -16107,7 +16115,7 @@ snapshots:
      sort-keys: 4.2.0
      strip-bom: 4.0.0

-  '@pnpm/registry-mock@3.46.0(encoding@0.1.13)(typanion@3.14.0)':
+  '@pnpm/registry-mock@3.48.0(encoding@0.1.13)(typanion@3.14.0)':
    dependencies:
      anonymous-npm-registry-client: 0.2.0
      execa: 5.1.1
@@ -17537,7 +17545,7 @@ snapshots:

  compressible@2.0.18:
    dependencies:
-      mime-db: 1.53.0
+      mime-db: 1.52.0

  compression@1.7.4:
    dependencies:
@@ -20093,8 +20101,6 @@ snapshots:

  mime-db@1.52.0: {}

-  mime-db@1.53.0: {}
-
  mime-types@2.1.35:
    dependencies:
      mime-db: 1.52.0
@@ -20790,8 +20796,6 @@ snapshots:

  ps-list@7.2.0: {}

-  psl@1.9.0: {}
-
  publish-packed@4.1.2:
    dependencies:
      all-module-paths: 0.10.7
@@ -20834,8 +20838,6 @@ snapshots:

  qs@6.5.3: {}

-  querystringify@2.2.0: {}
-
  queue-microtask@1.2.3: {}

  quick-format-unescaped@4.0.4: {}
@@ -21016,7 +21018,7 @@ snapshots:
      performance-now: 2.1.0
      qs: 6.5.3
      safe-buffer: 5.2.1
-      tough-cookie: 4.1.4
+      tough-cookie: 5.0.0
      tunnel-agent: 0.6.0
      uuid: 3.4.0

@@ -21039,7 +21041,7 @@ snapshots:
      performance-now: 2.1.0
      qs: 6.5.3
      safe-buffer: 5.2.1
-      tough-cookie: 4.1.4
+      tough-cookie: 5.0.0
      tunnel-agent: 0.6.0
      uuid: 3.4.0

@@ -21684,6 +21686,12 @@ snapshots:

  tinylogic@2.0.0: {}

+  tldts-core@6.1.70: {}
+
+  tldts@6.1.70:
+    dependencies:
+      tldts-core: 6.1.70
+
  tmp@0.0.33:
    dependencies:
      os-tmpdir: 1.0.2
@@ -21713,12 +21721,9 @@ snapshots:
    dependencies:
      nopt: 1.0.10

-  tough-cookie@4.1.4:
+  tough-cookie@5.0.0:
    dependencies:
-      psl: 1.9.0
-      punycode: 2.3.1
-      universalify: 0.2.0
-      url-parse: 1.5.10
+      tldts: 6.1.70

  tr46@0.0.3: {}

@@ -21958,8 +21963,6 @@ snapshots:

  universalify@0.1.2: {}

-  universalify@0.2.0: {}
-
  universalify@2.0.1: {}

  unix-crypt-td-js@1.1.4: {}
@@ -21978,11 +21981,6 @@ snapshots:
    dependencies:
      punycode: 2.3.1

-  url-parse@1.5.10:
-    dependencies:
-      querystringify: 2.2.0
-      requires-port: 1.0.0
-
  utf8-byte-length@1.0.5: {}

  util-deprecate@1.0.2: {}
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -55,7 +55,7 @@ catalog:
  "@pnpm/npm-package-arg": ^1.0.0
  "@pnpm/os.env.path-extender": ^2.0.0
  "@pnpm/patch-package": 0.0.0
-  "@pnpm/registry-mock": 3.46.0
+  "@pnpm/registry-mock": 3.48.0
  "@pnpm/semver-diff": ^1.1.0
  "@pnpm/tabtab": ^0.5.4
  "@pnpm/util.lex-comparator": 3.0.0
--- a/pnpm/test/hooks.ts
+++ b/pnpm/test/hooks.ts
@@ -3,7 +3,7 @@ import path from 'path'
 import { createHash } from '@pnpm/crypto.hash'
 import { type PackageManifest } from '@pnpm/types'
 import { prepare, preparePackages } from '@pnpm/prepare'
-import { REGISTRY_MOCK_PORT } from '@pnpm/registry-mock'
+import { REGISTRY_MOCK_PORT, getIntegrity } from '@pnpm/registry-mock'
 import loadJsonFile from 'load-json-file'
 import { sync as writeYamlFile } from 'write-yaml-file'
 import { execPnpm, execPnpmSync } from './utils'
@@ -296,3 +296,20 @@ test('adding or changing pnpmfile should change pnpmfileChecksum and module stru
  const lockfile3 = project.readLockfile()
  expect(lockfile3).toStrictEqual(lockfile0)
 })
+
+test('loading a pnpmfile from a config dependency', async () => {
+  prepare({
+    dependencies: {
+      '@pnpm/x': '1.0.0',
+    },
+    pnpm: {
+      configDependencies: {
+        '@pnpm.e2e/exports-pnpmfile': `1.0.0+${getIntegrity('@pnpm.e2e/exports-pnpmfile', '1.0.0')}`,
+      },
+    },
+  })
+
+  await execPnpm(['install', '--config.pnpmfile=node_modules/.pnpm-config/@pnpm.e2e/exports-pnpmfile/pnpmfile.cjs'])
+
+  expect(fs.readdirSync('node_modules/.pnpm')).toContain('@pnpm+y@1.0.0')
+})
--- a/pnpm/test/install/hooks.ts
+++ b/pnpm/test/install/hooks.ts
@@ -302,9 +302,9 @@ test('fails when .pnpmfile.cjs requires a non-existed module', async () => {

  fs.writeFileSync('.pnpmfile.cjs', 'module.exports = require("./this-does-node-exist")', 'utf8')

-  const proc = execPnpmSync(['install', '@pnpm.e2e/pkg-with-1-dep'])
+  const proc = execPnpmSync(['add', '@pnpm.e2e/pkg-with-1-dep'])

-  expect(proc.stderr.toString()).toContain('Error during pnpmfile execution')
+  expect(proc.stdout.toString()).toContain('Error during pnpmfile execution')
  expect(proc.status).toBe(1)
 })

--- a/workspace/state/src/createWorkspaceState.ts
+++ b/workspace/state/src/createWorkspaceState.ts
@@ -6,6 +6,7 @@ export interface CreateWorkspaceStateOptions {
  pnpmfileExists: boolean
  filteredInstall: boolean
  settings: WorkspaceStateSettings
+  configDependencies?: Record<string, string>
 }

 export const createWorkspaceState = (opts: CreateWorkspaceStateOptions): WorkspaceState => ({
@@ -38,4 +39,5 @@ export const createWorkspaceState = (opts: CreateWorkspaceStateOptions): Workspa
    'workspacePackagePatterns',
  ], opts.settings),
  filteredInstall: opts.filteredInstall,
+  configDependencies: opts.configDependencies,
 })
--- a/workspace/state/src/types.ts
+++ b/workspace/state/src/types.ts
@@ -11,6 +11,7 @@ export interface WorkspaceState {
  }>
  pnpmfileExists: boolean
  filteredInstall: boolean
+  configDependencies?: Record<string, string>
  settings: WorkspaceStateSettings
 }

--- a/workspace/state/src/updateWorkspaceState.ts
+++ b/workspace/state/src/updateWorkspaceState.ts
@@ -11,6 +11,7 @@ export interface UpdateWorkspaceStateOptions {
  workspaceDir: string
  pnpmfileExists: boolean
  filteredInstall: boolean
+  configDependencies?: Record<string, string>
 }

 export async function updateWorkspaceState (opts: UpdateWorkspaceStateOptions): Promise<void> {