packages:
  - '.'
  - 'extensions/*'
  - 'packages/*'
  - 'apps/*'
  - 'evals/*'
  - 'evals/*/apps/*'
  - 'evals/*/packages/*'
  - 'evals/*/packages/adapters/*'
  - 'web'

# Keep native Android build paths below CMake's Windows object path limit.
virtualStoreDir: .pnpm
virtualStoreDirMaxLength: 20

overrides:
  dompurify: ">=3.4.17"
  markdown-it: "14.3.3"
  follow-redirects: ">=1.16.2"
  zod: "4.6.6"
  body-parser: ">=2.4.0"
  "undici@>=6.0.0 <6.29.1": "6.29.1"
  svgo: ">=4.1.0"
  http-cache-semantics: ">=4.2.1"
  source-map-js: ">=1.2.2"
  "@vue/server-renderer": ">=3.5.42"
  toml: ">=5.0.1"
  axios: ">=1.20.0"
  "brace-expansion@<1.1.20": "1.1.20"
  "brace-expansion@>=5.0.0 <5.0.11": "5.0.11"
  esbuild: ">=0.28.1"
  fast-uri: "3.1.7"
  form-data: "4.0.6"
  hono: "4.12.25"
  "ip-address@<=10.3.0": "10.3.1"
  js-yaml: "4.3.2"
  linkify-it: "5.0.2"
  "@modelcontextprotocol/sdk": "1.32.1"
  "nanoid@<3.3.18": "3.3.18"
  prosemirror-model: "1.25.11"
  "postcss@<=8.5.17": "8.5.23"
  proxy-addr: "2.0.8"
  sharp: "0.35.5"
  "tar@<=7.5.20": "7.5.22"
  "undici@>=7.0.0 <7.30.1": "7.30.1"
  "undici@>=8.0.0 <8.12.2": "8.12.2"
  "vite@<=6.4.3": "6.4.4"
  "vite@>=8.0.0 <8.1.6": "8.1.6"

allowBuilds:
  '@google/genai': true
  '@swc/core': true
  '@vscode/ripgrep': true
  electron: true
  electron-winstaller: true
  esbuild: true
  msgpackr-extract: false
  node-pty: true
  onnxruntime-node: true
  protobufjs: true
  sharp: false

# Exempt recently-published @earendil-works/pi-* from minimumReleaseAge policy
minimumReleaseAgeExclude:
  - '@earendil-works/pi-agent-core'
  - '@earendil-works/pi-ai'
  - '@earendil-works/pi-coding-agent'
  - '@earendil-works/pi-tui'
  - app-builder-lib@26.15.3
  - builder-util-runtime@9.7.0
  - builder-util@26.15.3
  - dmg-builder@26.15.3
  - electron-builder-squirrel-windows@26.15.3
  - electron-builder@26.15.3
  - electron-publish@26.15.3
  - '@earendil-works/pi-client@0.84.4'
  - '@earendil-works/pi-protocol@0.84.4'
  - '@earendil-works/pi-telemetry@0.84.4 || 0.85.1 || 0.87.0 || 1.4.0 || 1.5.0 || 1.5.2'
  - '@earendil-works/chord@0.85.1 || 0.87.0 || 1.4.0 || 1.5.0 || 1.5.2'
  - '@earendil-works/pi-codemode@1.4.0 || 1.5.0 || 1.5.2'
  - '@earendil-works/pi-mcp@1.4.0 || 1.5.0 || 1.5.2'
  - '@earendil-works/pi-schema@1.5.0 || 1.5.2'

auditConfig:
  # The web console is a client-only SPA and does not use React Router RSC actions.
  ignoreGhsas:
    - GHSA-qwww-vcr4-c8h2

patchedDependencies:
  # macOS 26 validates the temporary keychain password used by set-key-partition-list.
  # Remove once electron-builder ships https://github.com/electron-userland/electron-builder/pull/10067.
  '@earendil-works/pi-coding-agent@1.5.2': patches/@earendil-works__pi-coding-agent@1.5.2.patch
  app-builder-lib@26.15.3: patches/app-builder-lib@26.15.3.patch
  # Preserve compact Mermaid edge labels such as -.标签.->.
  beautiful-mermaid@1.1.3: patches/beautiful-mermaid@1.1.3.patch