6 Commits

Author	SHA1	Message	Date
Zoltan Kochan	45a6cb6b2a	refactor(auth): unify auth/SSL into structured configByUri (#11201) ... Replaces the dual `authConfig` (raw .npmrc) + `authInfos` (parsed auth) + `sslConfigs` (parsed SSL) pattern with a single structured `configByUri: Record<string, RegistryConfig>` field on Config. ### New types (`@pnpm/types`) - **`RegistryConfig`** — per-registry config: `{ creds?: Creds, tls?: TlsConfig }` - **`Creds`** — auth credentials: `{ authToken?, basicAuth?, tokenHelper? }` - **`TlsConfig`** — TLS config: `{ cert?, key?, ca? }` ### Key changes - Rewrite `createGetAuthHeaderByURI` to accept `Record<string, RegistryConfig>` instead of raw .npmrc key-value pairs - Eliminate duplicate auth parsing between `getAuthHeadersFromConfig` and `getNetworkConfigs` - Remove `authConfig` from the install pipeline (`StrictInstallOptions`, `HeadlessOptions`), replaced by `configByUri` - Remove `sslConfigs` from Config — SSL fields now live in `configByUri[uri].tls` - Remove `authConfig['registry']` mutation in `extendInstallOptions` (default registry now passed directly to `createGetAuthHeaderByURI`) - `authConfig` remains on Config only for raw .npmrc access (config commands, error reporting, config inheritance) ### Security - tokenHelper in project .npmrc now throws instead of being silently stripped - tokenHelper execution uses `shell: false` to prevent shell metacharacter injection - Basic auth uses `Buffer.from().toString('base64')` instead of `btoa()` for Unicode safety - Dispatcher only creates custom agents when entries actually have TLS fields	2026-04-05 20:15:10 +02:00
Zoltan Kochan	dba4153767	refactor: rename packages and consolidate runtime resolvers (#10999) ... * refactor: rename workspace.sort-packages and workspace.pkgs-graph - workspace.sort-packages -> workspace.projects-sorter - workspace.pkgs-graph -> workspace.projects-graph Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor: rename packages/ to core/ and pkg-manifest.read-package-json to reader - Rename packages/ directory to core/ for clarity - Rename pkg-manifest/read-package-json to pkg-manifest/reader (@pnpm/pkg-manifest.reader) - Update all tsconfig, package.json, and lockfile references Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor: consolidate runtime resolvers under engine/runtime domain - Remove unused @pnpm/engine.runtime.node.fetcher package - Rename engine/runtime/node.resolver to node-resolver (dash convention) - Move resolving/bun-resolver to engine/runtime/bun-resolver - Move resolving/deno-resolver to engine/runtime/deno-resolver - Update all package names, tsconfig paths, and lockfile references Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * chore: update lockfile after removing node.fetcher Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: sort tsconfig references and package.json deps alphabetically Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: auto-fix import sorting Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: update __typings__ paths in tsconfig.lint.json for moved resolvers Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: remove deno-resolver from deps of bun-resolver --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-18 00:19:58 +01:00
Brandon Cheng	5de89d81a6	chore: remove top-level composite property from tsconfig.json files (#8130) ... * chore: remove no-op composite property * chore: remove top-level composite property from existing files	2024-05-28 02:37:40 +02:00
Zoltan Kochan	583e3954be	fix: remove suppressImplicitAnyIndexErrors from typescript settings (#5991)	2023-01-28 18:19:26 +02:00
Zoltan Kochan	9cbe293876	refactor: put all non-public projects to directories that start with __	2022-11-20 02:40:44 +02:00
Zoltan Kochan	4ca53b0b50	refactor: group projects in different subdirectories (#5659)	2022-11-20 01:35:22 +02:00