packages:
  - "packages/*"   # published @platform-modules/* modules (built to dist, semver, GitHub Packages)
  - "tooling/*"    # private @tooling/* shared build/test config (workspace-only, never published)
  - "apps/*"       # private @app/* consumers + the consumer-harness (never published)

# Transitive-dependency security pins (CVE floor). pnpm 9 reads overrides ONLY here —
# the old package.json "pnpm.overrides" field is silently ignored, so the pins must live in this file.
overrides:
  undici: ^7.28.0
  ws: ^8.21.0
  form-data: ^4.0.6
  "@types/node": 22.19.21

# Single source of truth for shared dependency versions.
# Referenced as "catalog:" in each package.json. pnpm replaces catalog:/workspace:
# with the concrete range on publish/pack, so external consumers never see the literal.
catalog:
  "@types/node": ^22.10.0
  typescript: ^5.5.0
  tsup: ^8.2.0
  vitest: ^3.2.6
  esbuild: ^0.23.0
  turbo: ^2.0.0
  "@turbo/gen": ^2.0.0
  react: ^18.3.1
  react-dom: ^18.3.1
  "@types/react": ^18.3.3
  "@types/react-dom": ^18.3.0
  "@testing-library/react": ^16.0.0
  jsdom: ^24.1.0
  zod: ^4.4.3
  zustand: ^5.0.13
  astro: ^6.4.6
  "@astrojs/react": ^5.0.7
  "@playwright/test": ^1.47.0
  drizzle-orm: ^0.45.2
  "@neondatabase/serverless": ^1.1.0
  postgres: ^3.4.9
  "@electric-sql/pglite": ^0.5.2
  "@standard-schema/spec": ^1.1.0
  "@cloudflare/workers-types": ^4.20260624.1
  ioredis: ^5.3.2
  resend: ^6.12.4
  postmark: ^4.0.7
  "@aws-sdk/client-sesv2": ^3.1068.0
  "better-auth": ^1.6.13
  "@radix-ui/react-avatar": ^1.1.3
  "@radix-ui/react-checkbox": ^1.1.4
  "@radix-ui/react-dialog": ^1.1.6
  "@radix-ui/react-dropdown-menu": ^2.1.6
  "@radix-ui/react-radio-group": ^1.2.3
  "@radix-ui/react-select": ^2.1.6
  "@radix-ui/react-slot": ^1.1.2
  "@radix-ui/react-switch": ^1.1.3
  "@radix-ui/react-tabs": ^1.1.3
  "@radix-ui/react-toast": ^1.2.6
  "@radix-ui/react-tooltip": ^1.1.8
  react-day-picker: ^9.6.7
  "@tanstack/react-query": ^5.0.0
  "@tanstack/react-query-persist-client": ^5.0.0
  "@tanstack/query-sync-storage-persister": ^5.0.0
  "@tanstack/react-virtual": ^3.0.0
  web-vitals: ^4.0.0
  class-variance-authority: ^0.7.1
  tailwindcss: ^4.0.0
  "@testing-library/jest-dom": ^6.6.3
  "@stripe/stripe-js": ^9.8.0
  "@stripe/react-stripe-js": ^6.6.0
