# sources

content_hash: cf217f04e9593fd3b939d345bb417d4d0bfb0011b0ad82959cd4042ed1a3fda2
indexed_at: 2026-08-04 14:58:30
label:
  cmd:node --import tsx -e import("@multideal/invariantum-auth-adapter").then(m=>console.log("OK",Object.keys(m))).catch(e=>{console.log("FAIL",e.message);console.log(e.stack?.split("\n").slice(0,8).join("\n"))})


content_hash: 06c144012f2d484a9e2794246d18960aac3ea5dfa9c433bbb2ea5c8611cc4775
indexed_at: 2026-08-04 14:58:50
label:
  cmd:node --import tsx -e import("@multideal/invariantum-auth-adapter").then(m=>console.log("OK",Object.keys(m))).catch(e=>{console.log("FAIL",e.message);console.log((e.stack||"").split("\n").slice(0,10).join("\n"))})


# chunks_content

c0: cat multideal/pnpm-workspace.yaml
c3: command
c5: 2026-08-04T14:50:35.540546875+00:00
c1:
  packages:
    - "apps/*"

  patchedDependencies:
    "@platform-modules/commerce-orders@0.1.0": "patches/@platform-modules__commerce-orders.patch"

  # Moved from package.json "pnpm.overrides" — pnpm >=10 reads dependency overrides
  # only from here (the package.json "pnpm" field is ignored). See https://pnpm.io/settings
  overrides:
    "@tiptap/core": "3.22.5"
    "@tiptap/pm": "3.22.5"
    "@platform-modules/commerce-cart>@platform-modules/db": "0.1.0"
    "@platform-modules/commerce-catalog>@platform-modules/db": "0.1.0"
    "@platform-modules/commerce-inventory>@platform-modules/db": "0.1.0"
    "@platform-modules/commerce-orders>@platform-modules/db": "0.1.0"
    "@platform-modules/commerce-orders>@platform-modules/billing": "0.0.3"
    "@platform-modules/billing>@platform-modules/db": "0.1.0"
    "@platform-modules/billing>@platform-modules/ledger": "0.1.0"
    "@platform-modules/billing>@platform-modules/jobs": "0.0.2"
    "@platform-modules/billing>@platform-modules/tax": "0.0.2"
    "@platform-modules/commerce-promotions>@platform-modules/db": "0.1.0"
    "@platform-modules/commerce-reviews>@platform-modules/db": "0.1.0"

  # Dependency build scripts (preinstall/install/postinstall) are BLOCKED by pnpm 10's
  # default supply-chain guard, which prints an "Ignored build scripts: …" notice each install.
  # We DELIBERATELY keep them blocked — verified secure-default, zero functional cost:
  #   • Full toolchain (build, deploy, typecheck, e2e) is green with every one of these scripts
  #     blocked. Confirmed root cause: the native packages (sharp, esbuild, workerd, @swc/core)
  #     load their platform binaries from OPTIONAL deps (@img/sharp-*, @esbuild/*, @swc/core-*,
  #     @cloudflare/workerd-*) that pnpm links normally — NOT from a postinstall. So the blocked
  #     scripts are inert here. (See node_modules/.modules.yaml `skipped`: only the OTHER-platform
  #     binaries are skipped; this platform's are linked.)
  #   • The ONLY settings that silence the notice — onlyBuiltDependencies / dangerouslyAllowAllBuilds
  #     — would RE-ENABLE arbitrary install-time code execution for no functional gain. Rejected:
  #     that trades the secure default for cosmetic quiet (pnpm.io/supply-chain-security).
  # This list records the explicit "reviewed → do-not-build" decision. NOTE: pnpm 10.33 reads it
  # (`pnpm config list` shows it) but does NOT suppress the cosmetic notice from it — the notice is
  # the secure-default state, knowingly accepted, not an ignored signal. pnpm 11 replaces these keys
  # with `allowBuilds: <pkg>: false` (run `pnpx codemod pnpm-v10-to-v11`), which DOES suppress it
  # from a recorded false. Until then the notice is expected. To ever allow a build, move that one
  # entry to a new `onlyBuiltDependencies:` list — never blanket-approve.
  # Reviewed single allow (per policy above): @ast-grep/cli postinstall only symlinks the
  # platform binary already shipped via optionalDependencies; without it every invocation
  # does runtime binary resolution and prints a [warn].
  onlyBuiltDependencies:
    - "@ast-grep/cli"

  ignoredBuiltDependencies:
    - "@embedded-postgres/linux-x64"
    - "@firebase/util"
    - "@google/genai"
    - "@sentry/cli"
    - "@swc/core"
    - esbuild
    - protobufjs
    - sharp
    - simple-git-hooks
    - workerd


c3: command
c5: 2026-08-04T14:58:30.412191768+00:00
c0:
  node --import tsx -e import("@multideal/invariantum-auth-adapter").then(m=>console.log("OK",Object.keys(m))).catch(e=>{console.log("FAIL",e.message);console.log(e.stack?.split("\n").slice(0,8).join("\n"))})

c1:
  FAIL INVARIANTUM_AUTH_PROOF_DIR is required by the Multideal auth adapter
  Error: INVARIANTUM_AUTH_PROOF_DIR is required by the Multideal auth adapter
    at <anonymous> (/home/user/builds/dogfood-3ac39188be51/auth-adapter/index.mjs:18:9)
    at ModuleJob.run (node:internal/modules/esm/module_job:439:25)
    at async node:internal/modules/esm/loader:643:26
    at async importModuleDynamicallyWrapper (node:internal/vm/module:525:15)


c3: command
c5: 2026-08-04T14:58:50.318832005+00:00
c0:
  node --import tsx -e import("@multideal/invariantum-auth-adapter").then(m=>console.log("OK",Object.keys(m))).catch(e=>{console.log("FAIL",e.message);console.log((e.stack||"").split("\n").slice(0,10).join("\n"))})

c1:
  FAIL Cannot find package '@/server' imported from /home/user/.invariantum/target/apps/web/tests/e2e/helpers/actors.ts
  Error [ERR_MODULE_NOT_FOUND]: Cannot find package '@/server' imported from /home/user/.invariantum/target/apps/web/tests/e2e/helpers/actors.ts
    at Object.getPackageJSONURL (node:internal/modules/package_json_reader:301:9)
    at packageResolve (node:internal/modules/esm/resolve:768:81)
    at moduleResolve (node:internal/modules/esm/resolve:859:18)
    at defaultResolve (node:internal/modules/esm/resolve:992:11)
    at #cachedDefaultResolve (node:internal/modules/esm/loader:701:20)
    at #resolveAndMaybeBlockOnLoaderThread (node:internal/modules/esm/loader:721:38)
    at nextStep (node:internal/modules/customization_hooks:189:26)
    at resolveBaseSync (file:///home/user/builds/dogfood-3ac39188be51/node_modules/.pnpm/tsx@4.23.1/node_modules/tsx/dist/register-zZ7SWseA.mjs:2:9102)
    at resolveDirectorySync (file:///home/user/builds/dogfood-3ac39188be51/node_modules/.pnpm/tsx@4.23.1/node_modules/tsx/dist/register-zZ7SWseA.mjs:2:10315)


