mirror of
https://github.com/pnpm/pnpm.git
synced 2026-06-28 09:55:39 -04:00
4d3fe4b495
The pnpr resolver's two POST endpoints were the only proprietary routes served outside npm's reserved /-/ namespace, where they overlapped the package path space (a package literally named `v1`). Move them under the /-/pnpr namespace alongside the existing capability handshake: POST /v1/resolve -> POST /-/pnpr/v0/resolve POST /v1/verify-lockfile -> POST /-/pnpr/v0/verify-lockfile The GET /-/pnpr handshake now advertises protocol version 0 to match, and the Rust client's PROTOCOL_VERSION drops to 0. Keeping every pnpr route in the reserved namespace removes the package-collision concern and lets the disabled-resolver branch stop special-casing the old npm-compatible GET paths. No backward compatibility is kept: the resolver protocol is not yet released. Server and both clients (Rust pacquet-pnpr-client and the TypeScript `@pnpm/pnpr.client`) change together.
@pnpm/pnpr.client
Client library for the pnpr server. Resolves a project's dependencies server-side and returns the resolved lockfile.
How it works
- Sends
POST /v1/installto the pnpr server with the project's dependencies (and the existing lockfile, if any, for incremental resolution). - The server resolves against the client's registries, verifies the input lockfile under the client's policy, and answers with one gzipped JSON object carrying the resolved lockfile and stats.
- Returns the resolved lockfile for use with pnpm's headless install, which fetches every tarball directly from the registries in parallel — like a normal install. See pnpm/pnpm#12230.
pnpr is a stateless resolver: it stores no tarballs and serves no file content.
Usage
This package is used internally by pnpm when the pnprServer config option is set. It is not intended to be called directly, but can be used programmatically:
import { fetchFromPnpmRegistry } from '@pnpm/pnpr.client'
const { lockfile, stats } = await fetchFromPnpmRegistry({
registryUrl: 'http://localhost:4000',
dependencies: { react: '^19.0.0' },
devDependencies: { typescript: '^5.0.0' },
})
console.log(`Resolved ${stats.totalPackages} packages`)
// lockfile is ready for headless install
Configuration
Add to pnpm-workspace.yaml to enable automatically during pnpm install:
pnprServer: http://localhost:4000