@vltpkg/cli-js 1.0.2 → 1.0.4

package/{access-DB347PPG.js → access-RYNHM3DJ.js}

@@ -11,21 +11,23 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   resolveRegistry
-} from "./chunk-ONVLPT73.js";
+} from "./chunk-T4GYDWUJ.js";
 import {
   commandUsage
 } from "./chunk-LCDBW6IT.js";
+import "./chunk-XU5SMHXP.js";
+import "./chunk-WP6CYBPM.js";
 import {
   RegistryClient
-} from "./chunk-3HUTU5SO.js";
-import "./chunk-CNSTFT7U.js";
-import "./chunk-7NHXV6AH.js";
-import "./chunk-NS4VFXHX.js";
+} from "./chunk-2CLRMD5A.js";
+import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
-import "./chunk-WP6CYBPM.js";
+import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
-import "./chunk-Q46JRSZU.js";
 import "./chunk-XNLSTHDK.js";
+import "./chunk-BJBFEQRR.js";
+import "./chunk-VE6CCH33.js";
+import "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{bugs-QBKI62J6.js → bugs-ZHOC4U52.js}

@@ -14,37 +14,38 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   createHostContextsMap
-} from "./chunk-YDUHQU7N.js";
+} from "./chunk-MZIM7X37.js";
+import {
+  PackageInfoClient
+} from "./chunk-AK3RSABL.js";
+import "./chunk-ZWKI5OSF.js";
 import {
   Query,
   actual
-} from "./chunk-47IR6Z6C.js";
+} from "./chunk-OR5LSCSK.js";
 import {
   SecurityArchive
-} from "./chunk-3MBSXZ62.js";
-import {
-  PackageInfoClient
-} from "./chunk-WAFERMRI.js";
-import "./chunk-FWKQ7YDF.js";
-import "./chunk-F2GLBPGQ.js";
-import "./chunk-FM5DQZVN.js";
-import "./chunk-HTOTG4TS.js";
+} from "./chunk-WNDUKE42.js";
+import "./chunk-PDLEQEZ3.js";
+import "./chunk-OCJDISSI.js";
 import {
   commandUsage
 } from "./chunk-LCDBW6IT.js";
-import "./chunk-3HUTU5SO.js";
-import {
-  urlOpen
-} from "./chunk-CNSTFT7U.js";
-import "./chunk-7NHXV6AH.js";
 import {
   Spec
-} from "./chunk-NS4VFXHX.js";
-import "./chunk-E74WGW5C.js";
+} from "./chunk-XU5SMHXP.js";
 import "./chunk-WP6CYBPM.js";
+import "./chunk-HTOTG4TS.js";
+import {
+  urlOpen
+} from "./chunk-HAYXR3MW.js";
+import "./chunk-E74WGW5C.js";
+import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
-import "./chunk-Q46JRSZU.js";
 import "./chunk-XNLSTHDK.js";
+import "./chunk-BJBFEQRR.js";
+import "./chunk-VE6CCH33.js";
+import "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{build-EFJ3FFGU.js → build-HTM6Z7OQ.js}

@@ -11,23 +11,25 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-47IR6Z6C.js";
-import "./chunk-3MBSXZ62.js";
-import "./chunk-F2GLBPGQ.js";
-import "./chunk-FM5DQZVN.js";
-import "./chunk-HTOTG4TS.js";
+} from "./chunk-OR5LSCSK.js";
+import "./chunk-WNDUKE42.js";
+import "./chunk-PDLEQEZ3.js";
+import "./chunk-OCJDISSI.js";
 import {
   commandUsage
 } from "./chunk-LCDBW6IT.js";
-import "./chunk-7NHXV6AH.js";
-import "./chunk-NS4VFXHX.js";
-import "./chunk-E74WGW5C.js";
+import "./chunk-XU5SMHXP.js";
 import "./chunk-WP6CYBPM.js";
+import "./chunk-HTOTG4TS.js";
+import "./chunk-E74WGW5C.js";
+import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-XNLSTHDK.js";
+import "./chunk-BJBFEQRR.js";
+import "./chunk-VE6CCH33.js";
 import {
   isErrorWithCause
-} from "./chunk-Q46JRSZU.js";
-import "./chunk-XNLSTHDK.js";
+} from "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{cache-BQJCMDJN.js → cache-74GIE5TO.js}

@@ -15,32 +15,34 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-ULCDRVY2.js";
+} from "./chunk-E737X73P.js";
+import "./chunk-FEIPJIEN.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-Y7CQIZ7Y.js";
-import {
-  ViewClass
-} from "./chunk-RXNA2XCX.js";
+import "./chunk-VB3IWNHX.js";
+import "./chunk-T4GYDWUJ.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-BSB4XGBB.js";
-import "./chunk-FM5DQZVN.js";
-import "./chunk-ONVLPT73.js";
+import "./chunk-OCJDISSI.js";
 import {
   commandUsage
 } from "./chunk-LCDBW6IT.js";
-import {
-  CacheEntry
-} from "./chunk-3HUTU5SO.js";
-import "./chunk-CNSTFT7U.js";
-import "./chunk-7NHXV6AH.js";
 import {
   Spec
-} from "./chunk-NS4VFXHX.js";
-import "./chunk-E74WGW5C.js";
+} from "./chunk-XU5SMHXP.js";
 import "./chunk-WP6CYBPM.js";
+import {
+  ViewClass
+} from "./chunk-4KCU2KZL.js";
+import {
+  CacheEntry
+} from "./chunk-2CLRMD5A.js";
+import "./chunk-HAYXR3MW.js";
+import "./chunk-E74WGW5C.js";
+import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
-import "./chunk-Q46JRSZU.js";
 import "./chunk-XNLSTHDK.js";
+import "./chunk-BJBFEQRR.js";
+import "./chunk-VE6CCH33.js";
+import "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -192,7 +194,7 @@ var info = async (conf, keys, view2) => {
   );
 };
 var fetchAll = async (conf, test) => {
-  const rc = conf.options.packageInfo.registryClient;
+  const rc = await conf.options.packageInfo.getRegistryClient();
   const { cache } = rc;
   const map = {};
   for await (const [key, val] of cache) {
@@ -203,7 +205,7 @@ var fetchAll = async (conf, test) => {
   return map;
 };
 var fetchKeys = async (conf, keys, test, view2) => {
-  const rc = conf.options.packageInfo.registryClient;
+  const rc = await conf.options.packageInfo.getRegistryClient();
   const { cache } = rc;
   const map = {};
   const results = await Promise.all(
@@ -223,7 +225,7 @@ var fetchKeys = async (conf, keys, test, view2) => {
   return map;
 };
 var deleteEntries = async (conf, keys, test, view2) => {
-  const rc = conf.options.packageInfo.registryClient;
+  const rc = await conf.options.packageInfo.getRegistryClient();
   const { cache } = rc;
   let count = 0;
   let size = 0;
@@ -277,7 +279,7 @@ var deleteKeys = async (conf, keys, view2) => {
   return deleteEntries(conf, keys, () => true, view2);
 };
 var deleteAll = async (conf, _, view2) => {
-  const { cache } = conf.options.packageInfo.registryClient;
+  const { cache } = await conf.options.packageInfo.getRegistryClient();
   await rm(cache.path(), { recursive: true, force: true });
   await mkdir(cache.path(), { recursive: true });
   view2?.stdout("Deleted all cache entries.");
@@ -295,7 +297,7 @@ var add = async (conf, specs, view2) => {
       staleWhileRevalidate: false
     }).then(async (r) => {
       const { resolved, integrity } = r;
-      await packageInfo.registryClient.request(resolved, {
+      await (await packageInfo.getRegistryClient()).request(resolved, {
         ...conf.options,
         integrity,
         staleWhileRevalidate: false,

package/cache-unzip-src-unzip.js

@@ -4544,6 +4544,15 @@ var Cache = class _Cache extends I {
 import { pathToFileURL } from "node:url";
 import { gunzipSync } from "node:zlib";
 var __CODE_SPLIT_SCRIPT_NAME = import.meta.filename;
+var MAX_DECOMPRESSION_RATIO = 1e3;
+var defaultMaxUnpackedBytes = 2 * 1024 * 1024 * 1024;
+var parseMaxUnpackedBytes = (raw) => {
+  const n7 = Number(raw);
+  return Number.isFinite(n7) && n7 >= 1 ? Math.floor(n7) : defaultMaxUnpackedBytes;
+};
+var maxUnpackedBytes = parseMaxUnpackedBytes(
+  process.env.VLT_TAR_MAX_UNPACKED_BYTES
+);
 var isMain = (path) => path === __CODE_SPLIT_SCRIPT_NAME || path === pathToFileURL(__CODE_SPLIT_SCRIPT_NAME).toString();
 var main = async (path, input = process.stdin) => {
   if (!path) {
@@ -4586,7 +4595,20 @@ var main = async (path, input = process.stdin) => {
       const headSizeOriginal = readSize(buffer, 0);
       const body = buffer.subarray(headSizeOriginal);
       if (body[0] === 31 && body[1] === 139) {
-        const unz = gunzipSync(body);
+        let unz;
+        try {
+          unz = gunzipSync(body, {
+            maxOutputLength: Math.min(
+              maxUnpackedBytes,
+              body.length * MAX_DECOMPRESSION_RATIO
+            )
+          });
+        } catch (er) {
+          if (er.code !== "ERR_BUFFER_TOO_LARGE") {
+            throw er;
+          }
+          return null;
+        }
         const headersBuffer = buffer.subarray(7, headSizeOriginal);
         const headers = [];
         let i = 0;