@vltpkg/cli-js 1.0.0-rc.23 → 1.0.0-rc.24

package/{cache-E6HMZFT2.js → cache-PFWAIDXW.js}

@@ -15,7 +15,7 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import {
   ViewClass

package/{chunk-QC3YTQQW.js → chunk-267FYLJB.js}

@@ -17,7 +17,7 @@ var run = async (command) => {
   if (command) {
     process.argv.splice(2, 0, command);
   }
-  const vlt = await import("./src-YUW2DNJF.js");
+  const vlt = await import("./src-MQ7RJS5V.js");
   await vlt.default();
 };
 

package/{chunk-2M5IL56T.js → chunk-56TWRLHO.js}

@@ -35,7 +35,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 
 // ../../src/cli-sdk/src/print-err.ts
-import { mkdirSync, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { formatWithOptions } from "node:util";
 var formatOptions = {
@@ -70,6 +70,13 @@ var writeErrorLog = (e, format) => {
     return null;
   }
 };
+var readErrorLog = (file) => {
+  try {
+    return readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+};
 var printErr = (e, usage, stderr2, baseOpts) => {
   const format = (arg, opts) => {
     const { maxLines = 200, ...rest } = {
@@ -97,6 +104,14 @@ var printErr = (e, usage, stderr2, baseOpts) => {
   if (fileWritten) {
     stderr2("");
     stderr2(`Full details written to: ${fileWritten}`);
+    if (process.env.CI) {
+      const fullErrorLog = readErrorLog(fileWritten);
+      if (fullErrorLog) {
+        stderr2("");
+        stderr2("Full details:");
+        stderr2(fullErrorLog);
+      }
+    }
   }
   if (!knownError || knownError.bug) {
     stderr2("");

package/{chunk-PLT24MXC.js → chunk-A2LFSPYL.js}

@@ -16,7 +16,7 @@ import {
   stderr,
   stdout,
   styleTextStdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import {
   require_emoji_regex
 } from "./chunk-VTEFO2FT.js";

package/{chunk-KEQFTVVD.js → chunk-DED3ZRSM.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   stderr
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import {
   ViewClass
 } from "./chunk-RXNA2XCX.js";

package/{chunk-4EFXCCT3.js → chunk-GQUU7WYA.js}

@@ -235,7 +235,12 @@ var packTarball = async (manifest, dir, config) => {
                 dot: true
               });
               const isParentDir = pattern.includes("/") && pattern.startsWith(normalizedPath + "/");
-              return directMatch || isParentDir;
+              const isChildOfPattern = minimatch(
+                normalizedPath,
+                pattern + "/**",
+                { dot: true }
+              );
+              return directMatch || isParentDir || isChildOfPattern;
             });
           }
           const defaultExcludePatterns = [
@@ -284,7 +289,7 @@ var packTarball = async (manifest, dir, config) => {
       files,
       integrity,
       shasum,
-      resolvedManifest: manifest
+      resolvedManifest: processedManifest
     };
   } finally {
     config.options.packageJson.write(packDir, manifest);

package/{chunk-2T2STA4J.js → chunk-JGIRYPNR.js}

@@ -20,29 +20,29 @@ import {
 var globImport_commands_ts = __glob({
   "./commands/bugs.ts": () => import("./bugs-DIPRXK73.js"),
   "./commands/build.ts": () => import("./build-R53AIRYP.js"),
-  "./commands/cache.ts": () => import("./cache-E6HMZFT2.js"),
-  "./commands/ci.ts": () => import("./ci-L4M64XSN.js"),
+  "./commands/cache.ts": () => import("./cache-PFWAIDXW.js"),
+  "./commands/ci.ts": () => import("./ci-TH7ZUQ7W.js"),
   "./commands/config.ts": () => import("./config-GQHPERU5.js"),
-  "./commands/create.ts": () => import("./create-PSB6Z7GI.js"),
+  "./commands/create.ts": () => import("./create-P6Q344DA.js"),
   "./commands/docs.ts": () => import("./docs-VQ3ASW4D.js"),
-  "./commands/exec-cache.ts": () => import("./exec-cache-X535AX7S.js"),
-  "./commands/exec-local.ts": () => import("./exec-local-XFIGM2A3.js"),
-  "./commands/exec.ts": () => import("./exec-23AZTE6L.js"),
-  "./commands/help.ts": () => import("./help-HPMV7BR4.js"),
+  "./commands/exec-cache.ts": () => import("./exec-cache-MNOBZGEN.js"),
+  "./commands/exec-local.ts": () => import("./exec-local-X7QTI2RT.js"),
+  "./commands/exec.ts": () => import("./exec-QNDDSXFJ.js"),
+  "./commands/help.ts": () => import("./help-LEPLLKAZ.js"),
   "./commands/init.ts": () => import("./init-32T4YJZ5.js"),
   "./commands/install.ts": () => import("./install-5BBY7G5X.js"),
   "./commands/install/reporter.ts": () => import("./reporter-L7KNFUVD.js"),
-  "./commands/list.ts": () => import("./list-MLL5KVZW.js"),
+  "./commands/list.ts": () => import("./list-O6SW6DH3.js"),
   "./commands/login.ts": () => import("./login-LFHU3GCN.js"),
   "./commands/logout.ts": () => import("./logout-HRFY65WG.js"),
-  "./commands/pack.ts": () => import("./pack-TIJYGBW3.js"),
+  "./commands/pack.ts": () => import("./pack-VJOIINYL.js"),
   "./commands/ping.ts": () => import("./ping-ABWRUAWQ.js"),
   "./commands/pkg.ts": () => import("./pkg-3LKU4JA7.js"),
-  "./commands/publish.ts": () => import("./publish-NU3AIW3Q.js"),
-  "./commands/query.ts": () => import("./query-EF5DD44X.js"),
+  "./commands/publish.ts": () => import("./publish-MJ6HBVO7.js"),
+  "./commands/query.ts": () => import("./query-NIACPXFM.js"),
   "./commands/repo.ts": () => import("./repo-ZQS5FCHE.js"),
-  "./commands/run-exec.ts": () => import("./run-exec-YAMBGRK6.js"),
-  "./commands/run.ts": () => import("./run-I5HLQ2U5.js"),
+  "./commands/run-exec.ts": () => import("./run-exec-SNNLAS7X.js"),
+  "./commands/run.ts": () => import("./run-7KKZOV4V.js"),
   "./commands/token.ts": () => import("./token-NTSPC4UL.js"),
   "./commands/uninstall.ts": () => import("./uninstall-IM5T6TS5.js"),
   "./commands/update.ts": () => import("./update-Z67JWNNP.js"),

package/{chunk-DNTH7W55.js → chunk-PQJO2HPJ.js}

@@ -206,8 +206,8 @@ var vlxInstall = async (spec, options, promptFn) => {
     projectRoot: dir,
     monorepo: void 0,
     scurry: new PathScurry(dir),
-    // vlx always run lifecycle scripts for all packages
-    allowScripts: "*"
+    // allow lifecycle scripts but filter out malware via security archive
+    allowScripts: ":scripts:not(:malware)"
   });
   return vlxInfo(dir, options, manifest);
 };

package/{ci-L4M64XSN.js → ci-TH7ZUQ7W.js}

@@ -64,8 +64,8 @@ var views = {
 var command = async (conf) => {
   const ciOptions = {
     ...conf.options,
-    // allow all scripts by default on ci (unless user specifies a filter)
-    allowScripts: conf.get("allow-scripts") ?? "*",
+    // allow scripts but filter out malware via security archive
+    allowScripts: conf.get("allow-scripts") ?? ":scripts:not(:malware)",
     expectLockfile: true,
     frozenLockfile: true,
     cleanInstall: true,

package/cli-package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/cli-sdk",
   "description": "The source for the vlt CLI",
-  "version": "1.0.0-rc.23",
+  "version": "1.0.0-rc.24",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",

package/{create-PSB6Z7GI.js → create-P6Q344DA.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   vlxResolve
-} from "./chunk-DNTH7W55.js";
+} from "./chunk-PQJO2HPJ.js";
 import {
   ExecCommand,
   views
-} from "./chunk-PLT24MXC.js";
+} from "./chunk-A2LFSPYL.js";
 import "./chunk-RIYFGX27.js";
 import {
   styleTextStdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-VTEFO2FT.js";
 import "./chunk-RXNA2XCX.js";

package/{exec-23AZTE6L.js → exec-QNDDSXFJ.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   vlxResolve
-} from "./chunk-DNTH7W55.js";
+} from "./chunk-PQJO2HPJ.js";
 import {
   ExecCommand,
   views
-} from "./chunk-PLT24MXC.js";
+} from "./chunk-A2LFSPYL.js";
 import "./chunk-RIYFGX27.js";
 import {
   styleTextStdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-VTEFO2FT.js";
 import "./chunk-RXNA2XCX.js";

package/{exec-cache-X535AX7S.js → exec-cache-MNOBZGEN.js}

@@ -14,10 +14,10 @@ import {
   vlxInfo,
   vlxInstall,
   vlxList
-} from "./chunk-DNTH7W55.js";
+} from "./chunk-PQJO2HPJ.js";
 import {
   stdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import {
   ViewClass

package/{exec-local-XFIGM2A3.js → exec-local-X7QTI2RT.js}

@@ -12,9 +12,9 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-PLT24MXC.js";
+} from "./chunk-A2LFSPYL.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-2M5IL56T.js";
+import "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-VTEFO2FT.js";
 import "./chunk-RXNA2XCX.js";

package/{help-HPMV7BR4.js → help-LEPLLKAZ.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   loadCommand
-} from "./chunk-2T2STA4J.js";
+} from "./chunk-JGIRYPNR.js";
 import {
   generateDefaultHelp,
   generateFullHelp

package/{list-MLL5KVZW.js → list-O6SW6DH3.js}

@@ -11,8 +11,8 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   MermaidImageView
-} from "./chunk-KEQFTVVD.js";
-import "./chunk-2M5IL56T.js";
+} from "./chunk-DED3ZRSM.js";
+import "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-RXNA2XCX.js";
 import "./chunk-WGDTG44V.js";

package/{pack-TIJYGBW3.js → pack-VJOIINYL.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   packTarball
-} from "./chunk-4EFXCCT3.js";
+} from "./chunk-GQUU7WYA.js";
 import {
   prettyBytes
 } from "./chunk-LRPTCGTW.js";
@@ -209,6 +209,9 @@ var commandSingle = async (location, conf) => {
     ...runOptions,
     arg0: "prepare"
   });
+  const updatedManifest = conf.options.packageJson.read(manifestDir, {
+    reload: true
+  });
   const {
     name,
     version,
@@ -218,7 +221,7 @@ var commandSingle = async (location, conf) => {
     files,
     integrity,
     shasum
-  } = await packTarball(manifest, manifestDir, conf);
+  } = await packTarball(updatedManifest, manifestDir, conf);
   if (!isDryRun) {
     await writeFile(join(manifestDir, filename), tarballData);
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/cli-js",
   "description": "The vlt CLI",
-  "version": "1.0.0-rc.23",
+  "version": "1.0.0-rc.24",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",

package/{publish-NU3AIW3Q.js → publish-MJ6HBVO7.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   packTarball
-} from "./chunk-4EFXCCT3.js";
+} from "./chunk-GQUU7WYA.js";
 import {
   prettyBytes
 } from "./chunk-LRPTCGTW.js";

package/{query-EF5DD44X.js → query-NIACPXFM.js}

@@ -11,11 +11,11 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   MermaidImageView
-} from "./chunk-KEQFTVVD.js";
+} from "./chunk-DED3ZRSM.js";
 import {
   createDiffFilesProvider
 } from "./chunk-RIYFGX27.js";
-import "./chunk-2M5IL56T.js";
+import "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-RXNA2XCX.js";
 import "./chunk-WGDTG44V.js";

package/registry-client-package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/registry-client",
   "description": "Fetch package artifacts and metadata from registries",
-  "version": "1.0.0-rc.23",
+  "version": "1.0.0-rc.24",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",

package/{run-I5HLQ2U5.js → run-7KKZOV4V.js}

@@ -12,9 +12,9 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-PLT24MXC.js";
+} from "./chunk-A2LFSPYL.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-2M5IL56T.js";
+import "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-VTEFO2FT.js";
 import "./chunk-RXNA2XCX.js";

package/{run-exec-YAMBGRK6.js → run-exec-SNNLAS7X.js}

@@ -12,9 +12,9 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-PLT24MXC.js";
+} from "./chunk-A2LFSPYL.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-2M5IL56T.js";
+import "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-VTEFO2FT.js";
 import "./chunk-RXNA2XCX.js";

package/{src-YUW2DNJF.js → src-MQ7RJS5V.js}

@@ -11,13 +11,13 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   loadCommand
-} from "./chunk-2T2STA4J.js";
+} from "./chunk-JGIRYPNR.js";
 import {
   indent,
   outputCommand,
   stderr,
   stdout
-} from "./chunk-2M5IL56T.js";
+} from "./chunk-56TWRLHO.js";
 import "./chunk-TDTJOKF2.js";
 import "./chunk-RXNA2XCX.js";
 import "./chunk-WGDTG44V.js";

package/vlr.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-QC3YTQQW.js";
+} from "./chunk-267FYLJB.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlr.ts

package/vlrx.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-QC3YTQQW.js";
+} from "./chunk-267FYLJB.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlrx.ts

package/vlt.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-QC3YTQQW.js";
+} from "./chunk-267FYLJB.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlt.ts

package/vlx.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-QC3YTQQW.js";
+} from "./chunk-267FYLJB.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlx.ts

package/vlxl.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-QC3YTQQW.js";
+} from "./chunk-267FYLJB.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlxl.ts