pnpm-workspace.yaml

packages:
  - packages/*

allowBuilds:
  esbuild: true
  # Transitive arrivals from composer's constellation. Neither build runs
  # any code this repo executes: workerd's postinstall only links the
  # platform binary from its own optional dependency, and msgpackr-extract
  # compiles a native accelerator that falls back to JavaScript.
  msgpackr-extract: false
  workerd: false

# First-party SDKs we publish from our own CI (with npm provenance) and consume
# the same day. minimumReleaseAge is a quarantine for untrusted third-party
# publishes; it's the wrong threat model for packages we build ourselves, and
# provenance is the stronger control for "is this really our build". Exempt at
# the package level rather than re-pinning each version on every release.
# Exempt by package, never by version: the family pins move with every
# product release (update-product-versions.yml), and a version-qualified
# exemption would need editing on each move.
minimumReleaseAgeExclude:
  - '@prisma/compute-sdk'
  - '@prisma/management-api-sdk'
  - '@prisma/composer'
  - '@prisma/composer-cli'
  - '@prisma/cli-engine'
  # The ORM family and the framework it reaches through.
  - '@prisma/orm-toolchain'
  - '@prisma/orm-framework'
  - '@alchemy.run/cloudflare-runtime@2.0.0-beta.74'
  - '@alchemy.run/floci@2.0.0-beta.74'
  - '@alchemy.run/node-utils@2.0.0-beta.74'
  - '@distilled.cloud/aws@1.0.0-rc.6'
  - '@distilled.cloud/axiom@1.0.0-rc.6'
  - '@distilled.cloud/cloudflare@1.0.0-rc.6'
  - '@distilled.cloud/core@1.0.0-rc.6'
  - '@distilled.cloud/fly-io@1.0.0-rc.6'
  - '@distilled.cloud/hetzner@1.0.0-rc.6'
  - '@distilled.cloud/neon@1.0.0-rc.6'
  - '@distilled.cloud/planetscale@1.0.0-rc.6'
  - alchemy@2.0.0-beta.74