pnpm-workspace.yaml

packages:
  - apps/*
  - packages/*
  - packages/platform/*
  - libraries/*
  - examples/*
  - vendored/*
  - vendored/mimic/apps/*
  - vendored/mimic/packages/*
  # just-bash's optional native compression accelerators (node-only; we run
  # just-bash in the browser, so their build scripts are intentionally skipped).
ignoredBuiltDependencies:
  - "@mongodb-js/zstd"
  - node-liblzma
patchedDependencies:
  "alchemy@2.0.0-beta.77": patches/alchemy@2.0.0-beta.77.patch
  "nitrogen@0.35.5": patches/nitrogen@0.35.5.patch
  "@earendil-works/pi-ai@0.80.7": patches/@earendil-works__pi-ai@0.80.7.patch
  "brace-expansion@5.0.9": patches/brace-expansion@5.0.9.patch
catalog:
  # Effect ecosystem (v4)
  effect: 4.0.0-rc.112
  alchemy: 2.0.0-beta.77
  typescript: 6.0.3
  "@effect/platform-node": 4.0.0-rc.112
  "@effect/platform": ^0.94.1
  "@effect/platform-node-shared": 4.0.0-rc.112
  "@effect/platform-bun": 4.0.0-rc.112
  "@effect/vitest": 4.0.0-rc.112
  "@effect/opentelemetry": 4.0.0-rc.112
  "@effect/sql-clickhouse": 4.0.0-rc.112
  "@effect/sql-pg": 4.0.0-rc.112
  "@effect-aws/client-sqs": 2.0.0-beta.4
  "@effect-aws/client-s3": 2.0.0-beta.4
  effect-query: 1.0.0
  "@effect/language-service": ^0.86.2
  "@better-auth/api-key": ^1.6.23
  better-auth: ^1.6.23

  # TanStack
  "@tanstack/react-query": 5.100.11
  "@tanstack/react-query-devtools": 5.100.11
  "@tanstack/react-router": 1.170.7
  "@tanstack/react-router-ssr-query": 1.167.0
  "@tanstack/react-start": 1.168.10
  "@tanstack/react-table": ^8.21.3
  "@tanstack/zod-adapter": 1.167.0

  # tRPC
  "@trpc/client": ^11.1.0
  "@trpc/server": ^11.1.0
  "@trpc/tanstack-react-query": ^11.1.0

  # React 19 & types
  # Runtime bumped to 19.2 (required by fumadocs 16); @types stay on the 19.1
  # line to avoid a duplicate-@types/react skew with packages pinned to 19.1
  # (mimic-admin, react-native). fumadocs peers `@types/react: *`, so 19.1 types
  # against the 19.2 runtime are fine.
  react: 19.2.7
  react-dom: 19.2.7
  "@types/react": ^19.1.0
  "@types/react-dom": ^19.1.0

  # Shared frontend dependencies
  "@fontsource-variable/geist": ^5.2.8
  "@fontsource-variable/geist-mono": ^5.2.7
  "@hookform/resolvers": ^5.1.1
  "@tailwindcss/vite": ^4.1.17
  "@vitejs/plugin-react": ^5.1.1
  "babel-plugin-react-compiler": 19.1.0-rc.2
  "cross-fetch": ^4.1.0
  "dotenv-cli": ^7.4.4
  "lucide-react": ^0.555.0
  "react-hook-form": ^7.60.0
  "sonner": ^2.0.6
  tailwindcss: ^4.1.17
  "tw-animate-css": ^1.2.4
  # Pinned to 0.1.23: 0.1.24's config bundler regressed (`Cannot convert undefined or
  # null to object` when the Vitest IDE extension / `vp` loads vitest.mts configs). Floating
  # `latest` also caused per-package version skew across the workspace. Bump once upstream fixes it.
  vite: ^7.3.5
  "vite-tsconfig-paths": ^5.1.4
  zod: ^4.1.13

  # Crypto — WebCrypto-only, Cloudflare Workers-safe (replaces jsonwebtoken/jsrsasign)
  jose: ^6.0.11
  "@peculiar/x509": ^2.0.0
  reflect-metadata: ^0.2.2

  # Test and runtime tooling
  vitest: npm:@voidzero-dev/vite-plus-test@0.1.24
  vite-plus: 0.1.24
  playwright-core: 1.61.1
  nodemailer: 9.0.3
  "@types/nodemailer": 8.0.1
catalogs:
  react18:
    react: 18.3.1
    react-dom: 18.3.1
overrides:
  "smol-toml@<1.7.1": 1.7.1
  "effect": 4.0.0-rc.112
  "@effect/platform-bun": 4.0.0-rc.112
  "@effect/platform-node": 4.0.0-rc.112
  "@effect/platform-node-shared": 4.0.0-rc.112
  "@effect/opentelemetry": 4.0.0-rc.112
  "@effect/sql-pg": 4.0.0-rc.112
  "@effect/sql-clickhouse": 4.0.0-rc.112
  "@effect/sql-d1": 4.0.0-rc.112
  "@effect/sql-sqlite-do": 4.0.0-rc.112
  "@effect/sql-mysql2": 4.0.0-rc.112
  "@effect/vitest": 4.0.0-rc.112
  "@tanstack/query-core": 5.100.11
  "tsyringe>tslib": 2.8.1
  "@babel/plugin-transform-modules-systemjs@<=7.29.3": 7.29.4
  "@babel/core@<=7.29.0": 7.29.6
  "@esbuild-kit/core-utils>esbuild": 0.25.0
  "@expo/cli>tar": 7.5.21
  "@expo/metro-config>postcss": 8.5.23
  "@hono/node-server@<2.0.10": 2.0.10
  "@isaacs/brace-expansion@<=5.0.0": 5.0.1
  "@tanstack/react-start@>=1.0.0 <1.167.30": 1.167.30
  "@tootallnate/once@<2.0.1": 2.0.1
  "@xmldom/xmldom@<0.8.13": 0.8.13
  "@srsholmes/vitest-react-native>esbuild": 0.28.1
  "ajv@<7": 6.14.0
  "ajv@>=7.0.0-alpha.0 <8.18.0": 8.18.0
  "brace-expansion@<=5.0.8": 5.0.9
  "bundle-require>esbuild": 0.28.1
  "defu@<=6.1.4": 6.1.7
  "dompurify@<3.4.13": 3.4.13
  "drizzle-orm@<0.45.2": 0.45.2
  "esbuild@>=0.28.0 <0.28.1": 0.28.1
  "fast-uri@<=3.1.4": 3.1.5
  "fast-xml-parser@>=5.9.3 <5.10.1": 5.10.1
  "fdir>picomatch": 4.0.4
  "fflate@>=0.6.0 <0.6.11": 0.6.11
  "flatted@<=3.4.1": 3.4.2
  "form-data@>=4.0.0 <4.0.6": 4.0.6
  h3-v2: npm:h3@2.0.1-rc.18
  "js-yaml@<3.15.2": 3.15.2
  "js-yaml@>=4.0.0 <4.3.2": 4.3.2
  "hono@>=4 <4.13.5": 4.13.5
  "postcss@>=8.0.0 <8.5.23": 8.5.23
  kysely: 0.28.17
  "lodash@>=4.0.0 <=4.17.23": 4.18.0
  "mermaid@>=11.0.0-alpha.1 <11.16.1": 11.16.1
  "minimatch@<3.1.4": 3.1.4
  "minimatch@>=9.0.0 <9.0.7": 9.0.7
  "minimatch@>=10.0.0 <10.2.3": 10.2.3
  "nanoid@>=3 <3.3.18": 3.3.18
  "nanoid@>=4 <5.1.16": 5.1.16
  "next@>=16.0.0-beta.0 <16.3.3": 16.3.3
  "node-forge@<1.4.0": 1.4.0
  "picomatch@<2.3.2": 2.3.2
  "picomatch@>=3.0.0 <3.0.2": 3.0.2
  "picomatch@>=4.0.0 <4.0.4": 4.0.4
  "rollup@>=4 <4.59.0": 4.59.0
  "shell-quote@>=1.1.0 <=1.8.3": 1.10.0
  "sharp@<0.35.4": 0.35.4
  "socket.io-parser@<4.2.7": 4.2.7
  "tar@>=7 <7.5.21": 7.5.21
  "tsup>esbuild": 0.28.1
  "undici@>=6 <6.28.0": 6.28.0
  "undici@>=7 <7.29.0": 7.29.0
  "valibot@<1.4.2": 1.4.2
  "vite@>=7 <=7.3.4": 7.3.5
  "vite>esbuild": 0.28.1
  "vitest@>=3 <4.1.11": 4.1.11
  "ws@>=6 <6.2.4": 6.2.4
  "ws@>=7 <7.5.11": 7.5.11
  "ws@>=8 <8.21.0": 8.21.0
  "xcode>uuid": 11.1.1
  "yaml@>=2.0.0 <2.8.3": 2.8.3
peerDependencyRules:
  allowAny:
    - vite
    - vitest
  allowedVersions:
    vite: "*"
    vitest: "*"
# Kept false as a conservative default: `catalog:`/version-range deps resolve from the registry
# rather than being shadowed by a same-named workspace package. The original driver — the in-repo
# mimic packages colliding with the previously published @voidhash/mimic (since dropped
# entirely) — no longer applies now that internal dependencies use `workspace:*`. All internal
# deps use the `workspace:*` protocol, which links regardless of this flag, so true/false are
# equivalent for the current dependency graph.
linkWorkspacePackages: false
nodeLinker: hoisted
# The private cloud workspace consumes this repository as a nested workspace.
# Its root install is authoritative there; package scripts must not start a second
# install from this nested workspace while Turbo is running the combined graph.
verifyDepsBeforeRun: false
minimumReleaseAge: 0
blockExoticSubdeps: false
allowBuilds:
  "@confluentinc/kafka-javascript": false
  "@mongodb-js/zstd": false
  "@parcel/watcher": true
  "@tailwindcss/oxide": true
  esbuild: true
  msgpackr-extract: true
  msw: true
  node-liblzma: false
  nitrogen: true
  protobufjs: true
  react-native-nitro-modules: true
  sharp: true
  simple-git-hooks: true
  unrs-resolver: true
  workerd: true
  vue-demi: true
auditConfig:
  ignoreGhsas:
    - GHSA-5p2g-fcmc-qvqq
    - GHSA-w3rx-r6r6-pgpr