@automattic/vip 4.0.8 → 4.0.10

package/dist/bin/vip-wp.js

@@ -20,6 +20,7 @@ var _proxyAgent = require("../lib/http/proxy-agent");
 var _token = _interopRequireDefault(require("../lib/token"));
 var _tracker = require("../lib/tracker");
 var _helpers = require("../lib/wp/helpers");
+var _readline2 = require("../lib/wp/readline");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 const debug = (0, _debug.default)('@automattic/vip:wp');
@@ -107,8 +108,8 @@ const bindStreamEvents = ({
       subShellRl.close();
       process.exit();
     }
-    subShellRl.resume();
-    subShellRl.prompt();
+    (0, _readline2.safeResume)(subShellRl);
+    (0, _readline2.safePrompt)(subShellRl);
   });
 };
 const getTokenForCommand = async (appId, envId, command) => {
@@ -233,7 +234,7 @@ const bindReconnectEvents = ({
     });
 
     // Resume readline interface
-    subShellRl.resume();
+    (0, _readline2.safeResume)(subShellRl);
   });
   currentJob.socket.on('retry', async () => {
     debug('socket: retry');
@@ -391,6 +392,7 @@ const examples = [{
   const commandState = (0, _helpers.initState)();
   let seenWP = false;
   const subShellRl = _readline.default.createInterface(subShellSettings);
+  (0, _readline2.trackReadline)(subShellRl);
   subShellRl.on('line', async line => {
     if (commandRunning) {
       return;
@@ -398,7 +400,7 @@ const examples = [{
 
     // Handle plain return / newline
     if (!line) {
-      subShellRl.prompt();
+      (0, _readline2.safePrompt)(subShellRl);
       return;
     }
 
@@ -411,7 +413,7 @@ const examples = [{
     if (userCmdCancelled) {
       seenWP = false;
       (0, _helpers.resetState)(commandState);
-      subShellRl.prompt();
+      (0, _readline2.safePrompt)(subShellRl);
       return;
     }
     if (!seenWP && line.trimStart().startsWith('wp ')) {
@@ -426,10 +428,10 @@ const examples = [{
     } else {
       (0, _helpers.resetState)(commandState);
       console.log(_chalk.default.red('Error:'), 'invalid command, please pass a valid WP-CLI command.');
-      subShellRl.prompt();
+      (0, _readline2.safePrompt)(subShellRl);
       return;
     }
-    subShellRl.pause();
+    (0, _readline2.safePause)(subShellRl);
     let result;
     const wpCliCmd = commandState.command.replace(/^wp\s+/, '');
     seenWP = false;
@@ -450,7 +452,7 @@ const examples = [{
         subShellRl.close();
         process.exit(1);
       }
-      subShellRl.prompt();
+      (0, _readline2.safePrompt)(subShellRl);
       return;
     }
     const {
@@ -522,9 +524,9 @@ const examples = [{
   });
   if (!isSubShell) {
     mutableStdout.muted = true;
-    subShellRl.write(`wp ${cmd}\n`);
+    (0, _readline2.safeWrite)(subShellRl, `wp ${cmd}\n`);
     mutableStdout.muted = false;
     return;
   }
-  subShellRl.prompt();
+  (0, _readline2.safePrompt)(subShellRl);
 });

package/dist/lib/database.js

@@ -86,21 +86,16 @@ const getSqlFileStreamFromCompressedFile = async filePath => {
   }
   throw new Error('Not a supported compressed file');
 };
+
+// Replaces the byte-size value that mydumper embeds in chunk header comments (e.g. `-- tablename 1234`)
+// with -1. mydumper exports the original file size in those headers, but since we modify the dump,
+// the size is no longer accurate — setting it to -1 tells mydumper to ignore it.
+// Lines starting with `-- metadata` are left untouched as they use the same format but are not chunk headers.
 const fixMyDumperTransform = () => {
-  const regex = /^-- ([^ ]+) \d+$/;
+  const regex = /^-- (?!metadata)([^ ]+) \d+$/gm;
   return new _nodeStream.Transform({
     transform(chunk, _encoding, callback) {
-      const chunkString = chunk.toString();
-      const lineEnding = chunkString.includes('\r\n') ? '\r\n' : '\n';
-      const lines = chunk.toString().split(lineEnding).map(line => {
-        const match = regex.exec(line);
-        if (!match) {
-          return line;
-        }
-        const tablePart = match[1];
-        return `-- ${tablePart} -1`;
-      });
-      callback(null, lines.join(lineEnding));
+      callback(null, chunk.toString().replace(regex, '-- $1 -1'));
     }
   });
 };

package/dist/lib/keychain/insecure.js

@@ -1,7 +1,7 @@
 "use strict";
 
 exports.__esModule = true;
-exports.default = void 0;
+exports.Insecure = void 0;
 var _configstore = _interopRequireDefault(require("configstore"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 class Insecure {
@@ -40,4 +40,4 @@ class Insecure {
     }
   }
 }
-exports.default = Insecure;
+exports.Insecure = Insecure;

package/dist/lib/keychain/secure.js

@@ -1,7 +1,7 @@
 "use strict";
 
 exports.__esModule = true;
-exports.default = void 0;
+exports.Secure = void 0;
 var _keytar = _interopRequireDefault(require("@github/keytar"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 class Secure {
@@ -16,4 +16,4 @@ class Secure {
     return _keytar.default.deletePassword(service, service);
   }
 }
-exports.default = Secure;
+exports.Secure = Secure;

package/dist/lib/keychain.js

@@ -1,22 +1,27 @@
 "use strict";
 
 exports.__esModule = true;
-exports.default = void 0;
+exports.getKeychain = getKeychain;
 var _debug = _interopRequireDefault(require("debug"));
-var _insecure = _interopRequireDefault(require("./keychain/insecure"));
+var _insecure = require("./keychain/insecure");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 let keychain;
 const debug = (0, _debug.default)('@automattic/vip:keychain');
-try {
-  // Try using Secure keychain ("keytar") first
-  // eslint-disable-next-line @typescript-eslint/no-require-imports
-  const Secure = require('./keychain/secure').default;
-  keychain = new Secure();
-} catch (error) {
-  debug('Cannot use Secure keychain; falling back to Insecure keychain (Details: %o)', error);
-
-  // Fallback to Insecure keychain if we can't
-  keychain = new _insecure.default('vip-go-cli');
-}
-const exportedKeychain = keychain;
-var _default = exports.default = exportedKeychain;
+async function getKeychain() {
+  if (typeof keychain === 'undefined') {
+    try {
+      const {
+        Secure
+      } = await import('./keychain/secure.js');
+      const kc = new Secure();
+      // We don't know if the secure keychain is actually usable until we try to communicate with it.
+      await kc.getPassword('non-existent-password-fraude-perit-virtus');
+      debug('Using Secure keychain');
+      keychain = kc;
+    } catch (error) {
+      debug('Cannot use Secure keychain; falling back to Insecure keychain (Details: %o)', error);
+      keychain = new _insecure.Insecure('vip-go-cli');
+    }
+  }
+  return keychain;
+}

package/dist/lib/token.js

@@ -5,8 +5,7 @@ exports.default = exports.SERVICE = void 0;
 var _jwtDecode = require("jwt-decode");
 var _nodeCrypto = require("node:crypto");
 var _api = require("./api");
-var _keychain = _interopRequireDefault(require("./keychain"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+var _keychain = require("./keychain");
 // Config
 const SERVICE = exports.SERVICE = 'vip-go-cli';
 class Token {
@@ -62,29 +61,34 @@ class Token {
   }
   static async uuid() {
     const service = Token.getServiceName('-uuid');
-    let _uuid = await _keychain.default.getPassword(service);
+    const keychain = await (0, _keychain.getKeychain)();
+    let _uuid = await keychain.getPassword(service);
     if (!_uuid) {
       _uuid = (0, _nodeCrypto.randomUUID)();
-      await _keychain.default.setPassword(service, _uuid);
+      await keychain.setPassword(service, _uuid);
     }
     return _uuid;
   }
   static async setUuid(_uuid) {
     const service = Token.getServiceName('-uuid');
-    await _keychain.default.setPassword(service, _uuid);
+    const keychain = await (0, _keychain.getKeychain)();
+    await keychain.setPassword(service, _uuid);
   }
-  static set(token) {
+  static async set(token) {
     const service = Token.getServiceName();
-    return _keychain.default.setPassword(service, token);
+    const keychain = await (0, _keychain.getKeychain)();
+    return keychain.setPassword(service, token);
   }
   static async get() {
     const service = Token.getServiceName();
-    const token = (await _keychain.default.getPassword(service)) ?? '';
-    return new Token(token);
+    const keychain = await (0, _keychain.getKeychain)();
+    const token = await keychain.getPassword(service);
+    return new Token(token ?? '');
   }
-  static purge() {
+  static async purge() {
     const service = Token.getServiceName();
-    return _keychain.default.deletePassword(service);
+    const keychain = await (0, _keychain.getKeychain)();
+    return keychain.deletePassword(service);
   }
   static getServiceName(modifier = '') {
     let service = SERVICE;

package/dist/lib/wp/readline.js

@@ -0,0 +1,112 @@
+"use strict";
+
+exports.__esModule = true;
+exports.isReadlineClosed = isReadlineClosed;
+exports.safePause = safePause;
+exports.safePrompt = safePrompt;
+exports.safeResume = safeResume;
+exports.safeWrite = safeWrite;
+exports.trackReadline = trackReadline;
+/**
+ * Safe wrappers around `readline.Interface` lifecycle methods.
+ *
+ * On Node.js >= 24, calling `resume()`, `pause()`, `prompt()`, or `write()` on a
+ * readline interface that has already been closed throws
+ * `Error [ERR_USE_AFTER_CLOSE]: readline was closed`. On Node 20/22 the same
+ * calls are silent no-ops.
+ *
+ * `vip wp` drives non-interactive, one-shot commands through a readline
+ * interface bound to `process.stdin`. When stdin is redirected from
+ * `/dev/null` (no TTY, e.g. CI or container runs) the interface receives EOF
+ * immediately and closes, while the command keeps streaming output. On a
+ * websocket reconnect during a long-running command the reconnect handler then
+ * calls `resume()` on the already-closed interface, crashing the process on
+ * Node 24.
+ *
+ * These helpers guard every such call so the interface is only driven while it
+ * is still open. Closure is tracked through the documented `'close'` event
+ * rather than any internal interface property, so the behaviour does not depend
+ * on Node.js implementation details.
+ *
+ * Register an interface with {@link trackReadline} once, right after it is
+ * created, so the `'close'` listener is attached before the interface can
+ * close. Calls made through the `safe*` helpers on an untracked-but-open
+ * interface still work; tracking only adds the closed-state guard.
+ *
+ * @see https://nodejs.org/api/readline.html#event-close
+ */
+
+const closedInterfaces = new WeakSet();
+
+/**
+ * Begin tracking a readline interface so its closed state can be detected.
+ *
+ * Attaches a one-time `'close'` listener that records the interface as closed.
+ * Safe to call more than once for the same interface.
+ *
+ * @param rl The readline interface to track.
+ * @returns The same interface, for convenient chaining.
+ */
+function trackReadline(rl) {
+  rl.once('close', () => {
+    closedInterfaces.add(rl);
+  });
+  return rl;
+}
+
+/**
+ * Whether a tracked readline interface has already emitted `'close'`.
+ *
+ * @param rl The readline interface to inspect.
+ * @returns `true` if the interface has been closed, otherwise `false`.
+ */
+function isReadlineClosed(rl) {
+  return closedInterfaces.has(rl);
+}
+
+/**
+ * Resume the readline interface unless it has already been closed.
+ *
+ * @param rl The readline interface to resume.
+ */
+function safeResume(rl) {
+  if (!isReadlineClosed(rl)) {
+    rl.resume();
+  }
+}
+
+/**
+ * Pause the readline interface unless it has already been closed.
+ *
+ * @param rl The readline interface to pause.
+ */
+function safePause(rl) {
+  if (!isReadlineClosed(rl)) {
+    rl.pause();
+  }
+}
+
+/**
+ * Display the prompt unless the readline interface has already been closed.
+ *
+ * @param rl             The readline interface to prompt on.
+ * @param preserveCursor When `true`, prevents the cursor from being reset to 0.
+ */
+function safePrompt(rl, preserveCursor) {
+  if (!isReadlineClosed(rl)) {
+    rl.prompt(preserveCursor);
+  }
+}
+
+/**
+ * Write data into the readline interface unless it has already been closed.
+ *
+ * @param rl   The readline interface to write to.
+ * @param data The data to write.
+ * @param key  An optional key sequence, mirroring `Interface#write`.
+ */
+function safeWrite(rl, data, key) {
+  if (!isReadlineClosed(rl)) {
+    rl.write(data, key);
+  }
+}

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@automattic/vip",
-  "version": "4.0.8",
+  "version": "4.0.10",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@automattic/vip",
-      "version": "4.0.8",
+      "version": "4.0.10",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
@@ -41,7 +41,7 @@
         "socks-proxy-agent": "^10.0.0",
         "ssh2": "1.17.0",
         "tar": "^7.4.0",
-        "undici": "^7.0.0",
+        "undici": "^8.5.0",
         "update-notifier": "7.3.1",
         "xml2js": "^0.6.2"
       },
@@ -137,7 +137,7 @@
         "typescript": "^6.0.2"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=23.0.0",
+        "node": ">=22.19.0",
         "npm": ">=8"
       },
       "optionalDependencies": {
@@ -11418,9 +11418,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.0.0.tgz",
-      "integrity": "sha512-GSvaPUbk1U+FMZ7rJzF+F8e5YVtu7KnD40et/5rBXXRBv2jCO9L3qCewvIDDdudC0QycTFlf6EAA+h3kxBsuUw==",
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.0.tgz",
+      "integrity": "sha512-YeLUMlvR4Ou1B119LIaM0r65JvbOBooJDc9yEu0dClb/uSC5P4FrLU8OCCz/HXWvtPoIrR0dRzABTjo1sTN9Bw==",
       "funding": [
         {
           "type": "github",
@@ -14172,9 +14172,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.16",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
-      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
+      "version": "7.5.19",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.19.tgz",
+      "integrity": "sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
@@ -14624,12 +14624,12 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.25.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz",
-      "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==",
+      "version": "8.5.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.5.0.tgz",
+      "integrity": "sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==",
       "license": "MIT",
       "engines": {
-        "node": ">=20.18.1"
+        "node": ">=22.19.0"
       }
     },
     "node_modules/undici-types": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/vip",
-  "version": "4.0.8",
+  "version": "4.0.10",
   "description": "The VIP Javascript library & CLI",
   "main": "index.js",
   "bin": {
@@ -107,7 +107,7 @@
   ],
   "license": "MIT",
   "engines": {
-    "node": "^20.19.0 || ^22.12.0 || >=23.0.0",
+    "node": ">=22.19.0",
     "npm": ">=8"
   },
   "bugs": {
@@ -172,7 +172,7 @@
     "socks-proxy-agent": "^10.0.0",
     "ssh2": "1.17.0",
     "tar": "^7.4.0",
-    "undici": "^7.0.0",
+    "undici": "^8.5.0",
     "update-notifier": "7.3.1",
     "xml2js": "^0.6.2"
   },