chore: migrate from npm to pnpm

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-  # Enable version updates for npm
+  # Enable version updates for pnpm
   - package-ecosystem: "npm"
     directory: "/"
     schedule:

.github/workflows/ci.yml

@@ -22,20 +22,25 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
       - name: Setup Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'npm'
+          cache: 'pnpm'
 
       - name: Install dependencies
-        run: npm ci --legacy-peer-deps || npm install --legacy-peer-deps
+        run: pnpm install --frozen-lockfile
 
       - name: Type check
-        run: npm run typecheck
+        run: pnpm run typecheck
 
       - name: Build
-        run: npm run build
+        run: pnpm run build
 
       - name: Upload build artifacts
         if: matrix.node-version == '20.x'

.github/workflows/release.yml

@@ -19,21 +19,26 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '20.x'
-          cache: 'npm'
+          cache: 'pnpm'
           registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
-        run: npm ci --legacy-peer-deps || npm install --legacy-peer-deps
+        run: pnpm install --frozen-lockfile
 
       - name: Type check
-        run: npm run typecheck
+        run: pnpm run typecheck
 
       - name: Build
-        run: npm run build
+        run: pnpm run build
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v1
@@ -47,6 +52,6 @@ jobs:
       # Uncomment when ready to publish to npm
       # - name: Publish to npm
       #   if: startsWith(github.ref, 'refs/tags/')
-      #   run: npm publish --access public
+      #   run: pnpm publish --access public --no-git-checks
       #   env:
       #     NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.npmrc

@@ -0,0 +1,3 @@
+# pnpm configuration
+auto-install-peers=false
+strict-peer-dependencies=false

CONTRIBUTING.md

@@ -12,17 +12,17 @@ Thank you for your interest in contributing to the ObjectStack Auth Plugin! This
 
 2. **Install dependencies**
    ```bash
-   npm install
+   pnpm install
    ```
 
 3. **Build the project**
    ```bash
-   npm run build
+   pnpm run build
    ```
 
 4. **Watch mode for development**
    ```bash
-   npm run dev
+   pnpm run dev
    ```
 
 ## Project Structure
@@ -109,8 +109,8 @@ When adding tests (future work):
 
 3. **Verify your changes**
    ```bash
-   npm run typecheck
-   npm run build
+   pnpm run typecheck
+   pnpm run build
    ```
 
 4. **Commit with clear messages**
@@ -161,7 +161,7 @@ This repository includes several GitHub Actions workflows to ensure code quality
 ### Dependabot
 - **Schedule**: Weekly (Mondays)
 - **Updates**:
-  - npm dependencies
+  - pnpm dependencies
   - GitHub Actions versions
 - **Configuration**: `.github/dependabot.yml`
 

README.md

@@ -13,7 +13,7 @@
 ## Installation
 
 ```bash
-npm install @objectstack/plugin-auth better-auth
+pnpm add @objectstack/plugin-auth better-auth
 ```
 
 ## Quick Start

package.json

@@ -19,16 +19,16 @@
   "author": "ObjectStack",
   "license": "MIT",
   "peerDependencies": {
+    "@objectstack/protocol": "*",
+    "@objectstack/ql": "*",
     "better-auth": "^1.0.0",
     "react": "^18.0.0"
   },
-  "dependencies": {
-    "@objectstack/protocol": "*",
-    "@objectstack/ql": "*"
-  },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "@types/react": "^18.0.0",
+    "better-auth": "^1.4.17",
+    "react": "^19.2.3",
     "typescript": "^5.0.0"
   },
   "exports": {