Zoltan Kochan
d3ebbedc4a
Git preparation was gated only while fetching a package. Once an approved project placed prepared files in the shared store, a different project could link those files without consulting its own allowBuilds policy. Persist whether preparation was required in each git package's store-index row and check the active project policy before warm-store reuse. Legacy rows without the marker are reused only with explicit approval; otherwise they go through the existing cold fetch and preparation gate. Revalidate in-process git fetch results as well so a long-lived store controller cannot carry approval across policy changes. Pass the canonical lockfile resolution ID into both git fetch paths so the allowBuilds identity and suggested key stay byte-for-byte exact. Mirror the marker and warm-reuse gate in pacquet using the shared msgpackr-compatible store format. Closes pnpm/pnpm#13965.
@pnpm/fetching.fetcher-base
Types for pnpm-compatible fetchers
Installation
pnpm add @pnpm/fetching.fetcher-base
Usage
Here's a template for a fetcher using types from @pnpm/fetching.fetcher-base:
import { Resolution } from '@pnpm/resolver-base'
import {
FetchOptions,
FetchResult,
} from '@pnpm/fetching.fetcher-base'
export async function demoFetcher (
resolution: Resolution,
targetFolder: string,
opts: FetchOptions,
): Promise<FetchResult> {
// ...
return {
filesIndex,
tempLocation,
}
}
License
MIT