@vltpkg/cli-js 1.0.10 → 1.1.1

package/{chunk-MNK55XSE.js → chunk-CEHPRPGQ.js}

@@ -1203,6 +1203,10 @@ var definition = j2.heading("Configuration").description(
 
      Command-specific fields may be set in a nested \`command\` object that
      overrides any options defined at the top level.
+
+     Object type values given in the environment or on the command line
+     are merged key by key over the config files (command line wins over
+     environment); other values replace them.
     `
 ).flag({
   color: {
@@ -1266,6 +1270,12 @@ var definition = j2.heading("Configuration").description(
                     alias must be configured (e.g. via \`vlt setup\`) before it
                     can be used. The \`gh\` and \`jsr\` aliases have built-in
                     defaults that can be overridden here.
+
+                    Aliases given on the command line or in
+                    \`VLT_REGISTRIES\` (newline-delimited) merge with the
+                    configured ones, later sources winning per key. Pass
+                    \`--save-config\` to \`install\`, \`add\` or
+                    \`update\` to save them to \`vlt.json\`.
                     `
   },
   "scoped-registries": {
@@ -1689,6 +1699,17 @@ var definition = j2.heading("Configuration").description(
                     This is useful if a package already exists in
                     devDependencies or optionalDependencies, but you want to
                     move it to be a non-optional production dependency.`
+  },
+  "save-config": {
+    description: `Save the registry and git host options given on the
+                    command line or via \`VLT_*\` env (\`--registry\`,
+                    \`--registries\`, \`--default-registry-alias\`,
+                    \`--scoped-registries\`, \`--jsr-registries\`,
+                    \`--git-hosts\`, \`--git-host-archives\`) to the
+                    project \`vlt.json\` (or the user one with
+                    \`--config=user\`) after a successful \`install\`,
+                    \`add\` or \`update\`. Values a config file already
+                    has are left alone.`
   }
 }).opt({
   "save-prefix": {

package/{chunk-2YJ5MESP.js → chunk-DF5K4CYR.js}

@@ -15,11 +15,11 @@ import {
   splitDepID
 } from "./chunk-YOE3VZFX.js";
 import {
-  loadPackageJson
-} from "./chunk-E74WGW5C.js";
+  userAgent
+} from "./chunk-YBVTY6ZW.js";
 import {
   I
-} from "./chunk-LPIBYUMT.js";
+} from "./chunk-U7TEQCBN.js";
 import {
   defaultRegistryName
 } from "./chunk-VFBCWAOC.js";
@@ -270,10 +270,6 @@ var usesNpmRegistry = (node) => {
 // ../../src/security-archive/src/index.ts
 var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
 var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
-var { version } = loadPackageJson(
-  import.meta.filename,
-  "cli-package.json"
-);
 var SecurityArchive = class _SecurityArchive extends I {
   #expired = /* @__PURE__ */ new Set();
   #path;
@@ -343,9 +339,9 @@ var SecurityArchive = class _SecurityArchive extends I {
   /**
    * Retrieves a node using its name and version.
    */
-  #retrieveNodeByNameVersion(name, version2) {
+  #retrieveNodeByNameVersion(name, version) {
     for (const node of this.#nodesByName.get(name) ?? []) {
-      if (node.version === version2) {
+      if (node.version === version) {
         return node;
       }
     }
@@ -462,7 +458,7 @@ var SecurityArchive = class _SecurityArchive extends I {
       method: "POST",
       headers: {
         Authorization: `Basic ${Buffer.from(`${SOCKET_PUBLIC_API_TOKEN}:`).toString("base64url")}`,
-        "User-Agent": `@vltpkg/security-archive/${version}`
+        "User-Agent": userAgent
       },
       body: JSON.stringify({
         components: Array.from(queue)

package/{chunk-DAS7TVRN.js → chunk-DR4Z63B6.js}

@@ -12,15 +12,15 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   init,
   install
-} from "./chunk-FUCQ7ARR.js";
+} from "./chunk-JZJWASXL.js";
+import {
+  commandUsage
+} from "./chunk-CBASIDQH.js";
 import {
   asWSConfig,
   assertWSConfig,
   minimatch
-} from "./chunk-USTJECVS.js";
-import {
-  commandUsage
-} from "./chunk-5HPGL5WS.js";
+} from "./chunk-X2AWQGYG.js";
 import {
   load,
   save