pnpm-workspace.yaml

packages:
  - '.claude/hooks/fleet/*'
  - '.config/fleet/oxlint-plugin'
  - '.config/fleet/oxlint-plugin/fleet/*'
  - '.claude/hooks/repo/*'
  - '.config/repo/oxlint-plugin/*'

trustPolicy: no-downgrade
enableGlobalVirtualStore: true

# Refuse transitive (sub-) deps declared via git/tarball/local-tarball
# specs. Direct git deps in this repo are still allowed; this only
# affects what nested dependencies are permitted. Defends against a
# package listing a git URL in its own dependencies — a supply-chain
# vector that bypasses npm registry validation. pnpm's current
# default is `false`; declared explicitly so a future default flip
# can't silently widen the trust boundary.
catalog:
  '@mdn/browser-compat-data': 8.0.11
  # run-local-ci (bin: local-ci, formerly published as @redwoodjs/agent-ci)
  # runs a repo's GitHub Actions workflows locally in Docker so a change can
  # be validated before it's pushed (see the `agent-ci` skill). dtu-github-
  # actions is its GitHub-Actions parser, pinned explicitly (not left
  # transitive) so its version is uniform fleet-wide.
  '@ultrathink/acorn.rs.wasm': 0.1.1
  'brace-expansion': 5.0.9
  'dtu-github-actions': 0.18.1
  # shadscan — shadcn UI audit CLI for the design skills (missing UI
  # fundamentals report). Exact-pinned; the whole package is younger than
  # the soak window, so it carries a minimumReleaseAgeExclude entry below.
  '@shadscan/cli': 0.16.0
  '@sinclair/typebox': 0.34.52
  'ecc-agentshield': 1.4.0
  'run-local-ci': 0.18.1
  # typebox 1.x — the unscoped rewrite of @sinclair/typebox. Both names are
  # pinned while the fleet migrates; the 0.x entry is deleted once no member
  # imports the scoped name. 1.3.10 is inside the 7-day soak, so it carries a
  # dated minimumReleaseAgeExclude entry above.
  'typebox': 1.3.14
  '@socketregistry/packageurl-js': 1.5.2
  # -stable aliases: pnpm `overrides:` can't redirect a package's own
  # name when used INSIDE that same package — Node ESM treats it as a
  # self-reference and resolves through the local exports map, not
  # the override. The 4 Socket-published packages therefore need a
  # SECOND name (`<canonical>-stable`) aliased via `npm:` to the
  # published version. Build / hook / script / config code uses the
  # -stable name so it always resolves to the published catalog
  # version regardless of where the importing file lives. src/ +
  # test/ code uses the canonical name because vitest aliases that
  # to local src/.
  '@socketregistry/packageurl-js-stable': 'npm:@socketregistry/packageurl-js@1.5.2'
  '@socketsecurity/lib': 6.7.0
  '@socketsecurity/lib-stable': 'npm:@socketsecurity/lib@6.7.0'
  '@socketsecurity/registry': 2.0.5
  '@socketsecurity/registry-stable': 'npm:@socketsecurity/registry@2.0.5'
  '@socketsecurity/sdk': 4.1.4
  '@socketsecurity/sdk-stable': 'npm:@socketsecurity/sdk@4.1.4'
  '@types/mdast': 4.0.4
  '@types/node': 26.2.0
  '@types/semver': 7.8.0
  '@types/shell-quote': 1.7.5
  'compromise': 14.16.0
  # fast-check — property-based testing for pure fleet-script logic (pin
  # derivation, version compare, config validation). Runs standalone in vitest.
  # published: 2026-07-08 (past 7-day soak). See .claude/skills/fleet/property-testing.
  'fast-check': 4.9.0
  'magic-string': 1.2.0
  'markdownlint-cli2': 0.23.2
  'mdast-util-from-markdown': 2.0.3
  # GFM pair for render-faithful markdown parsing (tables, footnotes,
  # strikethrough, autolinks) — mdast-util-from-markdown must always be
  # combined with micromark-extension-gfm + mdast-util-gfm.
  'mdast-util-gfm': 3.1.0
  # The serializer half, for tools that legitimately EMIT markdown; edits to
  # existing documents stay position-based (never a whole-doc round-trip).
  'mdast-util-to-markdown': 2.1.2
  'micromark': 4.0.2
  'micromark-extension-gfm': 3.0.0
  'minimatch': 10.2.6
  'neosanitize': 0.3.0
  # nock — HTTP mocking for tests (disableNetConnect() + stubs). Pinned back
  # from the @mswjs/interceptors rewrite: npm deprecates 15.0.0 ("released
  # accidentally"), so the catalog-drift automation skips it and this pin is
  # hand-aligned with the canonical fleet catalog; bump to the stabilized 15.x
  # when it ships.
  'nock': 14.0.17
  # npm-high-impact 1.13.0 — wooorm's high-impact npm package lists
  # (npmHighImpact + npmTopDependents + npmTopDownloads); the ecosystem-reach
  # input for scripts/fleet/measure-ecosystem-impact.mts, which ranks override
  # candidates before simulating what a port actually cuts. Published
  # 2026-06-08, past the 7-day soak.
  'npm-high-impact': 1.13.0
  'oxfmt': 0.63.0
  'oxlint': 1.78.0
  'oxlint-tsgolint': 7.0.2001
  # parse5 — the HTML parser half of the markdown story. mdast hands raw HTML
  # back as an opaque `html` node (README `<picture>`/`<img>` blocks), so
  # attribute-level edits need parse5's per-attribute source locations to land
  # on a real attribute value instead of a string match. Paired with the mdast
  # + micromark GFM entries above; see lib/markdown-ast.mts.
  'parse5': 8.0.1
  # playwright-core — headless Chromium driver for the seeing-rendered-output
  # skill (render a page / unpacked MV3 extension popup to PNG). Fleet-canonical
  # catalog dep; source of truth is template/pnpm-workspace.fleet.yaml.
  'playwright-core': 1.62.1
  # portless — stable HTTPS `.localhost` URLs for local page tests and rendered UI checks.
  'portless': 0.15.5
  # Direct bundler pin for repos that run rolldown as their build
  # (socket-packageurl-js, socket-webext, the trusted-publisher
  # extension, and the in-progress esbuild→rolldown migrations).
  # Single-sourcing the version here stops the per-repo drift
  # (was 1.0.0 / 1.0.1 / 1.0.2 across adopters). Matches the
  # vite-bundled rolldown (8.0.14 → 1.0.2); the per-platform
  # @rolldown/binding-* + @oxc-project/types stay as soak-excluded
  # transitives (consumers depend on `rolldown` only).
  'regjsparser': 0.13.2
  'rolldown': 1.2.4
  'semver': 7.8.5
  'shell-quote': 1.10.0
  'taze': 21.1.0
  # vite 8.0.16 swaps esbuild → rolldown natively (bundles rolldown
  # 1.0.2) and patches the <=8.0.15 advisories (GHSA-fx2h-pf6j-xcff
  # high, GHSA-v6wh-96g9-6wx3 medium). Tracked here so the pnpm
  # override below pins every transitive `vite` (vitest, @vitest/*,
  # plugin authors) to it.
  'typescript': 7.0.2
  'vitest': 4.1.10
  '@vitest/coverage-v8': 4.1.10
  c8: 12.0.0
  'chrome-devtools-mcp': 1.7.0
  # Playwright MCP server — agent-driven browsing with the fleet agent-banner
  # init script (see .config/fleet/playwright/).
  '@playwright/mcp': 0.0.79
  '@vitest/ui': 4.1.10
  # agent-ci runs a repo's GitHub Actions workflows locally in Docker so a
  # change can be validated before it's pushed (see the `agent-ci` skill).
  # The published package is a self-contained Node CLI (`dist/cli.js`) — no
  # platform-binary optionalDependencies, despite the monorepo's internal
  # workspace layout. dtu-github-actions is its GitHub-Actions parser, pinned
  # explicitly (not left transitive) so its version is uniform fleet-wide.
  '@anthropic-ai/claude-code': 2.1.220
  # comptime 0.1.0 — Zig-inspired build-time evaluation for Rolldown/Vite.
  # Wraps comptime(() => expr) calls; the Rolldown plugin evaluates them at
  # build time and replaces the call site with the serialized literal result.
  # Use in rolldown.config.mts for any repo with a Rolldown build.
  # published: 2026-05-07 (26 days, past 7-day soak)
  'comptime': 0.1.0
  'rolldown-plugin-dts': 0.28.0
  'svgo': 4.0.2
  'vite': 8.2.0
  'vitiate': 0.3.1
  '@vitiate/core': 0.3.1

  'yaml': 2.9.0

# pnpm `overrides` block — two purposes:
#
# 1. Force every transitive `vite` resolution to the catalog'd 8.0.13.
#    Vitest 4.1.6 advertises support for `vite: ^6.0.0 || ^7.0.0 || ^8.0.0`,
#    so the bump is compatible. The override is what actually removes
#    esbuild from the install tree — without it, vitest would still
#    resolve vite ^6.x.
#
# 2. Force every consumer of Socket's own packages to resolve through
#    the catalog-pinned published versions. The `catalog:` form rewrites
#    `workspace:*`, `^x.y.z`, and bare-version specs alike to the version
#    in the default `catalog:` block above. This is the safety property
#    that prevents accidental local-checkout resolution when a sibling
#    repo is on disk: even if a downstream package declares
#    `"@socketsecurity/lib": "workspace:*"`, pnpm rewrites it to the
#    pinned npm version instead of a sibling working tree.
overrides:
  # Fleet-canonical overrides (managed by socket-wheelhouse sync; do not edit).
  '@sinclair/typebox': 'catalog:'
  '@socketregistry/packageurl-js': 'catalog:'
  '@socketsecurity/lib': 'catalog:'
  '@socketsecurity/registry': 'catalog:'
  '@socketsecurity/sdk': 'catalog:'
  'brace-expansion@>=4': '5.0.9'
  'chalk@>=5': '5.6.2'
  'es-define-property': 'npm:@socketregistry/es-define-property@1.0.7'
  'es-set-tostringtag': 'npm:@socketregistry/es-set-tostringtag@1.0.10'
  'function-bind': 'npm:@socketregistry/function-bind@1.0.7'
  'glob': '13.0.6'
  'gopd': 'npm:@socketregistry/gopd@1.0.7'
  'has-symbols': 'npm:@socketregistry/has-symbols@1.0.7'
  'has-tostringtag': 'npm:@socketregistry/has-tostringtag@1.0.7'
  'hasown': 'npm:@socketregistry/hasown@1.0.7'
  'iconv-lite': '0.7.3'
  'isexe@>=3': '4.0.0'
  'js-yaml@>=5.0.0 <5.2.2': '5.2.2'
  'lru-cache@>=10': '11.5.2'
  'magic-string': '1.1.0'
  'mime-db': '1.54.0'
  'mime-types@>=3': '3.0.2'
  'minimatch@>=3': '10.2.6'
  'minipass@>=4': '7.1.3'
  'postcss@>=8': '8.5.25'
  'safe-buffer': 'npm:@socketregistry/safe-buffer@1.0.9'
  'safer-buffer': 'npm:@socketregistry/safer-buffer@1.0.10'
  'semver@>=5.0.0 <7.6.0': '7.8.5'
  'side-channel': 'npm:@socketregistry/side-channel@1.0.10'
  'ssri@>=12': '13.0.1'
  'string-width@>=5': '8.2.2'
  'tinyexec': '1.3.0'
  'typebox': 'catalog:'
  'undici@<6': '6.28.0'
  'update-notifier@>=4.0.0': '7.3.1'
  'uuid': '11.1.1'
  'which': '7.0.0'
  'wrap-ansi@>=8': '9.0.2'
  'yaml@2': '2.9.0'

  # Repo-specific overrides below.
  # Dedup: @grpc/proto-loader 0.7 (dockerode direct) vs 0.8 (via @grpc/grpc-js,
  # also a dockerode dep). The 0.7->0.8 diff only touches an internal
  # `createMessageDefinition` helper signature; the public `loadSync`/`load`
  # API dockerode's session.js calls is unchanged. Collapse unscoped to 0.8.1.
  '@grpc/proto-loader': '0.8.1'
  # Dedup compat shim: @polka/url 0.5 (polka, via dtu-github-actions) vs
  # 1.0.0-next (sirv). See the patchedDependencies comment for the API break
  # + the shim that restores it.
  '@polka/url': '1.0.0-next.29'
  # Dedup: @types/unist is types-only (no runtime), pulled transitively by the
  # markdown tooling at both v2 and v3. Collapse v2→v3 — a types-only major is
  # not type-checked transitively (skipLibCheck), so the redirect is safe and
  # drops one duplicate from the dev tree.
  '@types/unist@2': '3.0.3'
  # Dedup compat shim: ansi-regex 5 (CJS yargs@17 cluster) vs 6 (ESM,
  # markdownlint). See the patchedDependencies comment for the shim.
  'ansi-regex': '6.2.2'
  # Dedup: color-convert 0.5.3 is a declared-but-unused dependency of
  # css-color-converter@2.0.0 (badge-maker) — its lib/index.js never
  # `require`s color-convert at all, so the 0.5.3 resolution is dead weight.
  # Collapse unscoped to color-convert 2.0.1 (already present via
  # ansi-styles -> wrap-ansi -> cliui -> yargs).
  'color-convert': '2.0.1'
  # Dedup: commander 8 (katex's cli.js, via micromark-extension-math ->
  # markdownlint) vs 11 (svgo). katex's cli.js only uses `.version()`,
  # `.option()`, `.parse()`, `.opts()` — stable across commander 8-11.
  # Verified: program.parse(['-i','in.tex']).opts() returns {input:'in.tex'}
  # under commander@11.1.0. Collapse unscoped to 11.1.0.
  'commander': '11.1.0'
  # Dedup compat shim: content-type 1 (body-parser direct) vs 2 (via type-is,
  # also a body-parser dep). See the patchedDependencies comment for the API
  # break + the shim that restores it.
  'content-type': '2.0.0'
  # Dedup: css-tree 2.2.1 (csso, pinned ~2.2.0, via svgo) vs 3.2.1 (svgo
  # direct). css-tree 3's changelog lists deep AST-shape breaks (Block/Ratio/
  # MediaFeature node shape, List.getSize()->size), but none touch the
  # surface csso actually exercises: functionally verified csso.minify()
  # (restructure on/off, !important merging, shorthand collapse, @supports,
  # @font-face/unicode-range, duplicate url() backgrounds) and a full
  # svgo.optimize() pass (preset-default, inlineStyles + minifyStyles) both
  # forced onto css-tree@3.2.1 and produced correct output. Collapse unscoped
  # to 3.2.1.
  'css-tree': '3.2.1'
  'is-interactive': 'npm:@socketregistry/is-interactive@1.0.6'
  'is-unicode-supported': 'npm:@socketregistry/is-unicode-supported@1.0.5'
  'json-stable-stringify': 'npm:@socketregistry/json-stable-stringify@1.0.14'
  # Dependabot transitive-advisory pin (soaked, semver-compatible).
  'markdown-it': '14.3.0'
  # Dedup: picomatch 2 (micromatch, via fast-glob -> globby ->
  # markdownlint-cli2) vs 4 (fdir/tinyglobby, via vite/vitest). micromatch's
  # `picomatch(glob, options, returnState)` call and its
  # `require('picomatch/lib/utils')` surface (isObject, isWindows,
  # toPosixSlashes) are unchanged; the one behavior diff (utils.isWindows()
  # no longer reads an options override) is never hit — neither fast-glob nor
  # globby ever pass a `windows` option. Collapse unscoped to 4.0.4.
  'picomatch': '4.0.5'
  'protobufjs': '7.6.5'
  'rolldown': 'catalog:'
  # sharp 0.35.0 dropped its install script (source compile is opt-in); pin the
  # logo generator's sharp to 0.35.3 so it stays on a no-build-script line — its
  # prebuilt @img/sharp-* binaries cover the rasterize + animated-GIF encode.
  'sharp': '0.35.3'
  'string-width': '8.2.2'
  # Dedup compat shim: strip-ansi 6 (CJS yargs@17 cluster) vs 7 (ESM,
  # via string-width@8 -> markdownlint). See the patchedDependencies comment
  # for the shim.
  'strip-ansi': '7.2.0'
  'vite': 'catalog:'
  'which@>=4': '7.0.0'

# Soak time for external-tools updates: minutes a release must have
# existed before scripts/fleet/external-tools/update.mts will consider it
# (mirrors pnpm's `minimumReleaseAge` for npm catalog entries). 10080
# minutes = 7 days. Same value fleet repos use.
minimumReleaseAge: 10080

# Refuse transitive (sub-) deps declared via git/tarball/local-tarball
# specs. Direct git deps in this repo are still allowed; this only
# affects what nested dependencies are permitted. Defends against a
# package listing a git URL in its own dependencies — a supply-chain
# vector that bypasses npm registry validation. pnpm's current
# default is `false`; declared explicitly so a future default flip
# can't silently widen the trust boundary.
blockExoticSubdeps: true

# pnpm 11's packageManager-version-check failure policy. `warn` lets the
# install proceed with a mismatched pnpm (emitting a warning) rather than
# hard-failing. `error` is the default when the field is absent — socket-lib
# had `error` while the wheelhouse lacked the field, which blocked commits
# under a dev pnpm that differed from the `packageManager` pin. `warn` keeps
# the pin informational without blocking CI or local dev.
pmOnFail: warn
minimumReleaseAgeExclude:
  # Socket-owned scopes — bypass the soak window because they ship
  # through Socket's own provenance + publish pipeline. Canonical
  # list: scripts/constants/socket-scopes.mts SOCKET_PACKAGE_PATTERNS.
  # Mirrored in `.config/taze.config.mts` (same scopes, same reason)
  # and consumed by scripts/fleet/external-tools/update.mts via
  # isSocketSourcedPackage / isSocketSourcedRepository.
  - '@socketoverride/*'
  - '@socketregistry/*'
  - '@socketsecurity/*'
  - 'sfw'
  - 'socket'
  # pnpm and the other external tools are NOT listed here. Their soak bypass
  # lives inline in scripts/fleet/setup/external-tools.json as a per-tool
  # `soakBypass` block carrying `published` + `removable` dates, which
  # `soak-exclude-scope-guard` requires (this list is Socket-owned scopes only)
  # and which auto-disarms on the `removable` date instead of lingering here.
  # Agent-CI 0.17.1 gives each job private writable node_modules and shares
  # completed pnpm/Yarn/Bun dependency trees through atomic lockfile-keyed
  # snapshots. dtu-github-actions is its matching workflow-parser package.
  # Both are dev-only local-CI tools and must stay on the same exact version.
  # playwright-core@1.55.1 — headless Chromium driver for the
  # rendering-chromium-to-png skill. Well-known Microsoft package, dev-only
  # (renders PNGs an agent can read; no runtime/ship surface). Long past soak;
  # listed for cascade parity. Exact-pinned so a future minor re-soaks.
  # compromise@14.15.1 is the attested re-publish that clears the
  # trust-downgrade flag on 14.15.0. The catalog bump to 14.15.1 + the
  # removed `trustPolicyExclude: compromise@14.15.0` need a matching
  # lockfile entry, and 14.15.1 published today so the resolution needs
  # a soak bypass. Scoped to the exact tag so a future 14.15.2 still
  # goes through the normal soak time.
  # vite 8.0.14 ships rolldown 1.0.2 natively (no esbuild transitive).
  # Excluded from the 7-day soak so we can pull the rolldown-based
  # build now — the fleet rule "bundler = rolldown, not esbuild"
  # trumps the soak heuristic for this one pinned version. Scoped to
  - '@stuie/*'
  - '@ultrathink/*'
  # oxfmt 0.55.0 — the formatter; bumped from 0.48.0 for its jsdoc fixes.
  # The main package + per-platform binding family are pinned to the exact
  # version (a scope glob would blanket-bypass any future @oxfmt publish). All
  # published within the 7-day soak; exact-pinned so a future 0.56 re-soaks.
  # oxlint 1.75.0 — the linter; catalog-pinned at 1.75.0. The main package + its
  # per-platform binding family are soak-excluded because oxlint is a
  # known-publisher (oxc) tool and the fleet MIGRATES + SUPPORTS its plugin API
  # (the socket/* rules are kept current with oxlint's plugin surface), so a
  # fresh oxlint is adopted immediately rather than pinned back. The soak targets
  # npm freshpub typosquats, not a first-party oxc release.
  - '@sdxgen/*'
  - 'sdxgen'
  # published: 2026-08-21 | removable: 2026-08-28
  - 'dtu-github-actions@0.18.1'
  # published: 2026-08-21 | removable: 2026-08-28
  - 'run-local-ci@0.18.1'
  - '@abitious/*'
  - '@decmpfs/*'
  - '@node-smol/*'
  - 'sockeye'
saveExact: true

# Native post-install build scripts. These three arrive transitively via
# @redwoodjs/agent-ci's `ssh2` (optional crypto acceleration). agent-ci's
# published CLI (`dist/cli.js`) runs without them — verified `agent-ci --help`
# works with the builds skipped — so we decline to run their post-install
# scripts. Declining is the safe default; running native build scripts from a
# transitive dep is unnecessary attack surface here.
allowBuilds:
  # Optional native addon for ssh2 crypto acceleration; JS fallback is fine.
  cpu-features: false
  # Ships prebuilt dist; its postinstall codegen isn't needed as a dependency.
  protobufjs: false
  # Fleet browser automation is playwright-core (page + extension-popup PNG) and
  # chrome-devtools-mcp; puppeteer itself is unused. Kept as a guard — no dep
  # pulls puppeteer today, but if a transitive ever does, its Chrome-download
  # postinstall stays declined (playwright-core already supplies the browser).
  puppeteer: false
  # Native bindings are optional (cpu-features above); pure-JS paths suffice.
  ssh2: false
  # sdk 4.0.3 ships a `preinstall` bootstrap script in the published tarball;
  # it is repo-setup tooling and is unneeded when consumed as a dep.
  '@socketsecurity/sdk': false
  # @swc/core native binding — vitiate's coverage-guided fuzz lane.
  '@swc/core': true

patchedDependencies:
  # default-export interop (managed by socket-wheelhouse sync; do not edit):
  # 5.0.7 dropped the default export from BOTH builds. The CJS half breaks
  # minimatch@9's compiled `__importDefault`, which reads `.default` and
  # skips the namespace fallback once `__esModule` is set. The ESM half
  # breaks any `import x from 'brace-expansion'`, the shape the fleet CI
  # cache action resolves through, so an unpatched member throws "does not
  # provide an export named default" and dies at setup before a test runs.
  # The patch restores `expand` as the default on each build separately;
  # patching one build leaves the other broken.
  # On a bump, regenerate via `pnpm patch brace-expansion` + `pnpm patch-commit`.
  brace-expansion@5.0.9: patches/brace-expansion@5.0.9.patch
  # default-export interop (managed by socket-wheelhouse sync; do not edit):
  # v10's ESM build ships named exports only, so `import minimatch from
  # 'minimatch'` throws "does not provide an export named default". That is
  # the shape `@actions/cache` resolves through, so an unpatched member dies
  # in the CI cache step at setup, before a single check runs. The patch adds
  # the default to BOTH builds; patching one leaves the other broken.
  # It also makes the `minimatch@>=3` hoist safe: a v3 consumer
  # (`@actions/glob@0.6.1` pulls 3.1.5) default-imports a callable, and the
  # patched v10 answers that same shape.
  # On a bump, regenerate via `pnpm patch minimatch` + `pnpm patch-commit`.
  minimatch@10.2.6: patches/minimatch@10.2.6.patch
  # phantom self-alias requires (managed by socket-wheelhouse sync; do not edit):
  # five dist files require '@socketsecurity/lib-stable/...' but lib declares no
  # such dependency — lib-stable is an alias of lib itself, so the require only
  # ever resolved by per-repo virtual-store placement accident. Under
  # enableGlobalVirtualStore the issuer path is the machine-wide store, where no
  # alias sibling exists, so every import of the secrets/ai surface dies with
  # Cannot find module '@socketsecurity/lib-stable/process/spawn/child' (pnpm v11
  # does not materialize packageExtensions deps inside the links store, so the
  # declaration alone cannot save it). The patch rewrites the five requires to
  # the relative path inside lib itself. Rides the @socketsecurity/lib catalog
  # pin: on a bump, regenerate via `pnpm patch @socketsecurity/lib` + `pnpm patch-commit`.
  '@socketsecurity/lib@6.7.0': patches/@socketsecurity__lib@6.7.0.patch

# Proceed with a node_modules purge WITHOUT an interactive confirm. The fleet
# runs pnpm non-interactively everywhere (skills, scripts, hooks, agents, CI) —
# no TTY. pnpm's default ABORTS a purge for lack of a TTY
# (ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY), wedging any commit whose
# pre-commit re-checks deps after a workspace/.npmrc change. Purging
# node_modules is safe (gitignored + regenerable). Unlike CI=true this does NOT
# force a frozen lockfile; CI keeps owning frozen-vs-update policy.
confirmModulesPurge: false

# Opt out of pnpm's packageManager-version self-check. CI installs pnpm from
# its native bin via the shared setup workflow, not corepack, so the runner's
# pnpm legitimately differs from the `packageManager` pin (which is
# informational, not a version to enforce). Without this, pnpm hard-fails
# ("This project is configured to use <pin> ... your current pnpm is <run>")
# the moment the runner's pnpm differs from the pin.
managePackageManagerVersions: false