@vltpkg/cli-js 1.0.3 → 1.0.4

package/{setup-23W5FQVW.js → setup-TDX5NXUN.js}

@@ -26,7 +26,7 @@ import "./chunk-WP6CYBPM.js";
 import "./chunk-4KCU2KZL.js";
 import {
   RegistryClient
-} from "./chunk-HNCE3YE5.js";
+} from "./chunk-2CLRMD5A.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";

package/{src-2NB67FPG.js → src-AVMBIRBC.js}

@@ -11,12 +11,12 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   loadCommand
-} from "./chunk-RNJSI3NZ.js";
+} from "./chunk-SKQHW56B.js";
 import {
   Config
-} from "./chunk-NXEH3NQZ.js";
-import "./chunk-G7UPIJAP.js";
-import "./chunk-FWKQ7YDF.js";
+} from "./chunk-A2EWSQPE.js";
+import "./chunk-AK3RSABL.js";
+import "./chunk-ZWKI5OSF.js";
 import {
   indent,
   outputCommand,
@@ -30,7 +30,7 @@ import {
 } from "./chunk-VB3IWNHX.js";
 import "./chunk-T4GYDWUJ.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-FFOXTPQA.js";
+import "./chunk-PDLEQEZ3.js";
 import "./chunk-OCJDISSI.js";
 import "./chunk-XU5SMHXP.js";
 import {

package/{src-6OKPBJJT.js → src-SWL4UPPI.js}

@@ -27,7 +27,7 @@ import {
   setRuntimeToken,
   setToken,
   userAgent
-} from "./chunk-HNCE3YE5.js";
+} from "./chunk-2CLRMD5A.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";

package/{src-M5RRGKUM.js → src-X66SVM5T.js}

@@ -33,10 +33,10 @@ import {
   sep
 } from "node:path";
 
-// ../../node_modules/.vlt/~npm~tar@7.5.20/node_modules/tar/dist/esm/header.js
+// ../../node_modules/.vlt/~npm~tar@7.5.22/node_modules/tar/dist/esm/header.js
 import { posix as pathModule } from "node:path";
 
-// ../../node_modules/.vlt/~npm~tar@7.5.20/node_modules/tar/dist/esm/large-numbers.js
+// ../../node_modules/.vlt/~npm~tar@7.5.22/node_modules/tar/dist/esm/large-numbers.js
 var encode = (num, buf) => {
   if (!Number.isSafeInteger(num)) {
     throw Error("cannot encode number outside of javascript safe integer range");
@@ -117,7 +117,7 @@ var pos = (buf) => {
 var onesComp = (byte) => (255 ^ byte) & 255;
 var twosComp = (byte) => (255 ^ byte) + 1 & 255;
 
-// ../../node_modules/.vlt/~npm~tar@7.5.20/node_modules/tar/dist/esm/types.js
+// ../../node_modules/.vlt/~npm~tar@7.5.22/node_modules/tar/dist/esm/types.js
 var isCode = (c) => name.has(c);
 var normalFsTypes = /* @__PURE__ */ new Set([
   "0",
@@ -172,7 +172,7 @@ var name = /* @__PURE__ */ new Map([
 ]);
 var code = new Map(Array.from(name).map((kv) => [kv[1], kv[0]]));
 
-// ../../node_modules/.vlt/~npm~tar@7.5.20/node_modules/tar/dist/esm/header.js
+// ../../node_modules/.vlt/~npm~tar@7.5.22/node_modules/tar/dist/esm/header.js
 var notNegative = (n) => n === void 0 || n < 0 ? void 0 : n;
 var Header = class {
   cksumValid = false;
@@ -379,7 +379,7 @@ var encDate = (buf, off, size, date) => date === void 0 ? false : encNumber(buf,
 var NULLS = new Array(156).join("\0");
 var encString = (buf, off, size, str) => str === void 0 ? false : (buf.write(str + NULLS, off, size, "utf8"), str.length !== Buffer.byteLength(str) || str.length > size);
 
-// ../../node_modules/.vlt/~npm~tar@7.5.20/node_modules/tar/dist/esm/pax.js
+// ../../node_modules/.vlt/~npm~tar@7.5.22/node_modules/tar/dist/esm/pax.js
 import { basename } from "node:path";
 var Pax = class _Pax {
   atime;
@@ -541,13 +541,33 @@ var findTarDir = (path, tarDir) => {
 };
 
 // ../../src/tar/src/unpack.ts
-var unzip = async (input) => new Promise(
-  (res, rej) => (
-    /* c8 ignore start */
-    unzipCB(input, (er, result) => er ? rej(er) : res(result))
-  )
-  /* c8 ignore stop */
+var MAX_DECOMPRESSION_RATIO = 1e3;
+var defaultMaxUnpackedBytes = 2 * 1024 * 1024 * 1024;
+var parseMaxUnpackedBytes = (raw) => {
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 1 ? Math.floor(n) : defaultMaxUnpackedBytes;
+};
+var maxUnpackedBytes = parseMaxUnpackedBytes(
+  process.env.VLT_TAR_MAX_UNPACKED_BYTES
 );
+var unzip = async (input) => {
+  const max = Math.min(
+    maxUnpackedBytes,
+    input.length * MAX_DECOMPRESSION_RATIO
+  );
+  return new Promise(
+    (res, rej) => unzipCB(input, { maxOutputLength: max }, (er, result) => {
+      if (!er) return res(result);
+      return rej(
+        er.code === "ERR_BUFFER_TOO_LARGE" ? error("tarball exceeds maximum unpacked size", {
+          found: input.length,
+          max,
+          cause: er
+        }) : er
+      );
+    })
+  );
+};
 var exists = async (path) => {
   try {
     await lstat(path);

package/{token-SRCS5CRU.js → token-3RDRZ4AO.js}

@@ -25,7 +25,7 @@ import {
   normalizeRegistryKey,
   registryBase,
   setToken
-} from "./chunk-HNCE3YE5.js";
+} from "./chunk-2CLRMD5A.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";

package/{uninstall-JXHAFXZ2.js → uninstall-CNAFZTLA.js}

@@ -11,12 +11,12 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   parseRemoveArgs
-} from "./chunk-UXIRAU5T.js";
+} from "./chunk-AIQ7Z62O.js";
 import {
   uninstall
-} from "./chunk-LZGKX7JI.js";
-import "./chunk-5B23EKN4.js";
-import "./chunk-FFOXTPQA.js";
+} from "./chunk-OR5LSCSK.js";
+import "./chunk-WNDUKE42.js";
+import "./chunk-PDLEQEZ3.js";
 import "./chunk-OCJDISSI.js";
 import {
   commandUsage
@@ -62,7 +62,7 @@ var usage = () => commandUsage({
 var views = {
   json: (i) => i.graph.toJSON(),
   human: lazyView(
-    async () => (await import("./reporter-DKZTTACW.js")).InstallReporter
+    async () => (await import("./reporter-6BFJCFVZ.js")).InstallReporter
   )
 };
 var command = async (conf) => {

package/{unpublish-GRYB5KQH.js → unpublish-7YHQQYZG.js}

@@ -21,7 +21,7 @@ import {
 import "./chunk-WP6CYBPM.js";
 import {
   RegistryClient
-} from "./chunk-HNCE3YE5.js";
+} from "./chunk-2CLRMD5A.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";

package/{update-GDLL4ER6.js → update-3W27EZWN.js}

@@ -11,9 +11,9 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   update
-} from "./chunk-LZGKX7JI.js";
-import "./chunk-5B23EKN4.js";
-import "./chunk-FFOXTPQA.js";
+} from "./chunk-OR5LSCSK.js";
+import "./chunk-WNDUKE42.js";
+import "./chunk-PDLEQEZ3.js";
 import "./chunk-OCJDISSI.js";
 import {
   commandUsage
@@ -59,7 +59,7 @@ var views = {
     graph: i.graph.toJSON()
   }),
   human: lazyView(
-    async () => (await import("./reporter-DKZTTACW.js")).InstallReporter
+    async () => (await import("./reporter-6BFJCFVZ.js")).InstallReporter
   )
 };
 var command = async (conf) => {

package/{version-JVG4CI4L.js → version-K37LT6GZ.js}

@@ -11,18 +11,18 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   createHostContextsMap
-} from "./chunk-TMBNGWXK.js";
+} from "./chunk-MZIM7X37.js";
 import {
   Query,
   actual
-} from "./chunk-LZGKX7JI.js";
-import "./chunk-5B23EKN4.js";
+} from "./chunk-OR5LSCSK.js";
+import "./chunk-WNDUKE42.js";
 import {
   is,
   isClean,
   minimatch,
   spawn
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-PDLEQEZ3.js";
 import "./chunk-OCJDISSI.js";
 import {
   commandUsage

package/{view-ABQLVL4L.js → view-ZVAYKUL2.js}

@@ -14,14 +14,14 @@ import {
 } from "./chunk-DBANBIL2.js";
 import {
   PackageInfoClient
-} from "./chunk-G7UPIJAP.js";
-import "./chunk-FWKQ7YDF.js";
+} from "./chunk-AK3RSABL.js";
+import "./chunk-ZWKI5OSF.js";
 import {
   SecurityArchive
-} from "./chunk-5B23EKN4.js";
-import "./chunk-FFOXTPQA.js";
+} from "./chunk-WNDUKE42.js";
+import "./chunk-PDLEQEZ3.js";
 import {
-  joinDepIDTuple
+  getId
 } from "./chunk-OCJDISSI.js";
 import {
   commandUsage
@@ -241,8 +241,8 @@ var views = {
     };
   }
 };
-var createFakeNode = (name, version) => ({
-  id: joinDepIDTuple(["registry", "", `${name}@${version}`]),
+var createFakeNode = (spec, name, version, options) => ({
+  id: getId(spec, { name, version }),
   name,
   version,
   confused: false,
@@ -255,7 +255,7 @@ var createFakeNode = (name, version) => ({
   dev: false,
   optional: false,
   graph: {},
-  options: {},
+  options,
   /* c8 ignore next 5 - stub methods for NodeLike interface */
   toJSON: () => ({}),
   toString: () => `${name}@${version}`,
@@ -309,7 +309,7 @@ var command = async (conf) => {
   const version = manifest.version;
   if (name && version) {
     try {
-      const node = createFakeNode(name, version);
+      const node = createFakeNode(spec, name, version, conf.options);
       const archive = await SecurityArchive.start({
         nodes: [node]
       });

package/vlr.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-5QJEOGEM.js";
+} from "./chunk-GXWZ5T4W.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlr.ts

package/vlrx.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-5QJEOGEM.js";
+} from "./chunk-GXWZ5T4W.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlrx.ts

package/vlt.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-5QJEOGEM.js";
+} from "./chunk-GXWZ5T4W.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlt.ts

package/vlx.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-5QJEOGEM.js";
+} from "./chunk-GXWZ5T4W.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlx.ts

package/vlxl.js

@@ -12,7 +12,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   run
-} from "./chunk-5QJEOGEM.js";
+} from "./chunk-GXWZ5T4W.js";
 import "./chunk-PZLD7RTK.js";
 
 // ../build/src/bins/vlxl.ts

package/{whoami-RCCZ7BXI.js → whoami-IOUW56D6.js}

@@ -19,7 +19,7 @@ import "./chunk-XU5SMHXP.js";
 import "./chunk-WP6CYBPM.js";
 import {
   RegistryClient
-} from "./chunk-HNCE3YE5.js";
+} from "./chunk-2CLRMD5A.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";

package/chunk-RNJSI3NZ.js

@@ -1,75 +0,0 @@
-var global = globalThis;
-import {Buffer} from "node:buffer";
-import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
-globalThis.setTimeout = _vlt_setTimeout;
-globalThis.clearTimeout = _vlt_clearTimeout;
-globalThis.setImmediate = _vlt_setImmediate;
-globalThis.clearImmediate = _vlt_clearImmediate;
-globalThis.setInterval = _vlt_setInterval;
-globalThis.clearInterval = _vlt_clearInterval;
-import {createRequire as _vlt_createRequire} from "node:module";
-var require = _vlt_createRequire(import.meta.filename);
-import {
-  error
-} from "./chunk-WZWDS3W4.js";
-import {
-  __glob
-} from "./chunk-PZLD7RTK.js";
-
-// import("./commands/**/*.ts") in ../../src/cli-sdk/src/load-command.ts
-var globImport_commands_ts = __glob({
-  "./commands/access.ts": () => import("./access-5WETTBDZ.js"),
-  "./commands/bugs.ts": () => import("./bugs-KONFLIQQ.js"),
-  "./commands/build.ts": () => import("./build-S7G2DU7I.js"),
-  "./commands/cache.ts": () => import("./cache-Z4OIMLXQ.js"),
-  "./commands/ci.ts": () => import("./ci-RZZE375O.js"),
-  "./commands/config.ts": () => import("./config-MDFY3ORD.js"),
-  "./commands/create.ts": () => import("./create-GVSDTOGQ.js"),
-  "./commands/deprecate.ts": () => import("./deprecate-T4TQLGXQ.js"),
-  "./commands/dist-tag.ts": () => import("./dist-tag-GO46UQUN.js"),
-  "./commands/docs.ts": () => import("./docs-FJME563T.js"),
-  "./commands/exec-cache.ts": () => import("./exec-cache-3UNLDUAP.js"),
-  "./commands/exec-local.ts": () => import("./exec-local-YHVO5RLU.js"),
-  "./commands/exec.ts": () => import("./exec-M22KBPCK.js"),
-  "./commands/help.ts": () => import("./help-ZEWMLOJX.js"),
-  "./commands/init.ts": () => import("./init-4HPZY2KN.js"),
-  "./commands/install.ts": () => import("./install-2TZIP4PJ.js"),
-  "./commands/install/reporter.ts": () => import("./reporter-DKZTTACW.js"),
-  "./commands/list.ts": () => import("./list-NFFXER43.js"),
-  "./commands/login.ts": () => import("./login-KV5YC5Z2.js"),
-  "./commands/logout.ts": () => import("./logout-I2VT3NAR.js"),
-  "./commands/pack.ts": () => import("./pack-47ZKFSHI.js"),
-  "./commands/ping.ts": () => import("./ping-Q7Y7QV63.js"),
-  "./commands/pkg.ts": () => import("./pkg-VTJS2ISJ.js"),
-  "./commands/profile.ts": () => import("./profile-YXZYVEUX.js"),
-  "./commands/publish.ts": () => import("./publish-CBN67KN2.js"),
-  "./commands/query.ts": () => import("./query-U3QHF3ZE.js"),
-  "./commands/registry.ts": () => import("./registry-CZPFR3OF.js"),
-  "./commands/repo.ts": () => import("./repo-4UIQRBI7.js"),
-  "./commands/run-exec.ts": () => import("./run-exec-HPNBVAXH.js"),
-  "./commands/run.ts": () => import("./run-5DUYI6GL.js"),
-  "./commands/setup.ts": () => import("./setup-23W5FQVW.js"),
-  "./commands/token.ts": () => import("./token-SRCS5CRU.js"),
-  "./commands/uninstall.ts": () => import("./uninstall-JXHAFXZ2.js"),
-  "./commands/unpublish.ts": () => import("./unpublish-GRYB5KQH.js"),
-  "./commands/update.ts": () => import("./update-GDLL4ER6.js"),
-  "./commands/version.ts": () => import("./version-JVG4CI4L.js"),
-  "./commands/view.ts": () => import("./view-ABQLVL4L.js"),
-  "./commands/whoami.ts": () => import("./whoami-RCCZ7BXI.js")
-});
-
-// ../../src/cli-sdk/src/load-command.ts
-var loadCommand = async (command) => {
-  try {
-    return await globImport_commands_ts(`./commands/${command}.ts`);
-  } catch (e) {
-    throw error("Could not load command", {
-      found: command,
-      cause: e
-    });
-  }
-};
-
-export {
-  loadCommand
-};