From 3e1f226281f332ed0dcce6837d4aa9f79f1f43f0 Mon Sep 17 00:00:00 2001
From: meeech <4623+meeech@users.noreply.github.com>
Date: Tue, 14 Apr 2026 00:26:55 -0400
Subject: [PATCH] chore: add pnpm packageManager field and workspace config

Add pnpm@10.33.0 as packageManager, create pnpm-workspace.yaml with
minimumReleaseAge (3 days) and onlyBuiltDependencies allowlist
(better-sqlite3, esbuild, protobufjs, sharp), update .npmrc as
safety-net fallback.
---
 .npmrc              | 4 +++-
 package.json        | 1 +
 pnpm-workspace.yaml | 8 ++++++++
 3 files changed, 12 insertions(+), 1 deletion(-)
 create mode 100644 pnpm-workspace.yaml

diff --git a/.npmrc b/.npmrc
index 2e218c567..7e5439483 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,3 @@
-minReleaseAge=7d
+# Safety net — pnpm-workspace.yaml has the authoritative minimumReleaseAge (4320 min = 3 days)
+# This .npmrc value is a fallback if npm is ever invoked directly
+minReleaseAge=3d
diff --git a/package.json b/package.json
index 33d624746..da99640be 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,7 @@
   "version": "1.2.52",
   "description": "Personal Claude assistant. Lightweight, secure, customizable.",
   "type": "module",
+  "packageManager": "pnpm@10.33.0",
   "main": "dist/index.js",
   "scripts": {
     "build": "tsc",
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 000000000..53327583a
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,8 @@
+onlyBuiltDependencies:
+  - better-sqlite3
+  - esbuild
+  - protobufjs
+  - sharp
+
+pnpm:
+  minimumReleaseAge: 4320