@vltpkg/cli-js 1.0.3 → 1.0.4

package/{chunk-FFOXTPQA.js → chunk-PDLEQEZ3.js}

@@ -1285,7 +1285,7 @@ var range = (a, b, str) => {
   return result;
 };
 
-// ../../node_modules/.vlt/~npm~brace-expansion@5.0.7/node_modules/brace-expansion/dist/esm/index.js
+// ../../node_modules/.vlt/~npm~brace-expansion@5.0.9/node_modules/brace-expansion/dist/esm/index.js
 var escSlash = "\0SLASH" + Math.random() + "\0";
 var escOpen = "\0OPEN" + Math.random() + "\0";
 var escClose = "\0CLOSE" + Math.random() + "\0";
@@ -1302,6 +1302,7 @@ var closePattern = /\\}/g;
 var commaPattern = /\\,/g;
 var periodPattern = /\\\./g;
 var EXPANSION_MAX = 1e5;
+var EXPANSION_MAX_LENGTH = 4e6;
 function numeric(str) {
   return !isNaN(str) ? parseInt(str, 10) : str.charCodeAt(0);
 }
@@ -1336,11 +1337,11 @@ function expand(str, options = {}) {
   if (!str) {
     return [];
   }
-  const { max = EXPANSION_MAX } = options;
+  const { max = EXPANSION_MAX, maxLength = EXPANSION_MAX_LENGTH } = options;
   if (str.slice(0, 2) === "{}") {
     str = "\\{\\}" + str.slice(2);
   }
-  return expand_(escapeBraces(str), max, true).map(unescapeBraces);
+  return expand_(escapeBraces(str), max, maxLength, true).map(unescapeBraces);
 }
 function embrace(str) {
   return "{" + str + "}";
@@ -1354,20 +1355,87 @@ function lte(i, y) {
 function gte(i, y) {
   return i >= y;
 }
-function expand_(str, max, isTop) {
-  const expansions = [];
+function combine(acc, pre, values, max, maxLength, dropEmpties) {
+  const out = [];
+  let length = 0;
+  for (let a = 0; a < acc.length; a++) {
+    for (let v = 0; v < values.length; v++) {
+      if (out.length >= max)
+        return out;
+      const expansion = acc[a] + pre + values[v];
+      if (dropEmpties && !expansion)
+        continue;
+      if (length + expansion.length > maxLength)
+        return out;
+      out.push(expansion);
+      length += expansion.length;
+    }
+  }
+  return out;
+}
+function expandSequence(body, isAlphaSequence, max, maxLength) {
+  const n = body.split(/\.\./);
+  const N = [];
+  if (n[0] === void 0 || n[1] === void 0) {
+    return N;
+  }
+  const x = numeric(n[0]);
+  const y = numeric(n[1]);
+  const width = Math.max(n[0].length, n[1].length);
+  let incr = n.length === 3 && n[2] !== void 0 ? Math.max(Math.abs(numeric(n[2])), 1) : 1;
+  let test = lte;
+  const reverse = y < x;
+  if (reverse) {
+    incr *= -1;
+    test = gte;
+  }
+  const pad = n.some(isPadded);
+  let length = 0;
+  for (let i = x; test(i, y) && N.length < max; i += incr) {
+    let c;
+    if (isAlphaSequence) {
+      c = String.fromCharCode(i);
+      if (c === "\\") {
+        c = "";
+      }
+    } else {
+      c = String(i);
+      if (pad) {
+        const need = width - c.length;
+        if (need > 0) {
+          const z = new Array(need + 1).join("0");
+          if (i < 0) {
+            c = "-" + z + c.slice(1);
+          } else {
+            c = z + c;
+          }
+        }
+      }
+    }
+    if (length + c.length > maxLength)
+      break;
+    N.push(c);
+    length += c.length;
+  }
+  return N;
+}
+function expand_(str, max, maxLength, isTop) {
+  let acc = [""];
+  let dropEmpties = false;
+  let firstGroup = true;
   for (; ; ) {
     const m = balanced("{", "}", str);
-    if (!m)
-      return [str];
+    if (!m) {
+      return combine(acc, str, [""], max, maxLength, dropEmpties);
+    }
     const pre = m.pre;
-    if (/\$$/.test(m.pre)) {
-      const post2 = m.post.length ? expand_(m.post, max, false) : [""];
-      for (let k = 0; k < post2.length && k < max; k++) {
-        const expansion = pre + "{" + m.body + "}" + post2[k];
-        expansions.push(expansion);
-      }
-      return expansions;
+    if (/\$$/.test(pre)) {
+      acc = combine(acc, pre + "{" + m.body + "}", [""], max, maxLength, dropEmpties && !m.post.length);
+      firstGroup = false;
+      if (!m.post.length)
+        break;
+      str = m.post;
+      continue;
     }
     const isNumericSequence = /^-?\d+\.\.-?\d+(?:\.\.-?\d+)?$/.test(m.body);
     const isAlphaSequence = /^[a-zA-Z]\.\.[a-zA-Z](?:\.\.-?\d+)?$/.test(m.body);
@@ -1379,77 +1447,58 @@ function expand_(str, max, isTop) {
         isTop = true;
         continue;
       }
-      return [str];
+      return combine(acc, pre + "{" + m.body + "}" + m.post, [""], max, maxLength, dropEmpties);
     }
-    const post = m.post.length ? expand_(m.post, max, false) : [""];
-    let n;
+    if (firstGroup) {
+      dropEmpties = isTop && !isSequence;
+      firstGroup = false;
+    }
+    let values;
     if (isSequence) {
-      n = m.body.split(/\.\./);
+      values = expandSequence(m.body, isAlphaSequence, max, maxLength);
     } else {
-      n = parseCommaParts(m.body);
+      let n = parseCommaParts(m.body);
       if (n.length === 1 && n[0] !== void 0) {
-        n = expand_(n[0], max, false).map(embrace);
+        n = expand_(n[0], max, maxLength, false).map(embrace);
         if (n.length === 1) {
-          return post.map((p) => m.pre + n[0] + p);
+          acc = combine(acc, pre + n[0], [""], max, maxLength, dropEmpties && !m.post.length);
+          if (!m.post.length)
+            break;
+          str = m.post;
+          continue;
         }
       }
-    }
-    let N;
-    if (isSequence && n[0] !== void 0 && n[1] !== void 0) {
-      const x = numeric(n[0]);
-      const y = numeric(n[1]);
-      const width = Math.max(n[0].length, n[1].length);
-      let incr = n.length === 3 && n[2] !== void 0 ? Math.max(Math.abs(numeric(n[2])), 1) : 1;
-      let test = lte;
-      const reverse = y < x;
-      if (reverse) {
-        incr *= -1;
-        test = gte;
-      }
-      const pad = n.some(isPadded);
-      N = [];
-      for (let i = x; test(i, y) && N.length < max; i += incr) {
-        let c;
-        if (isAlphaSequence) {
-          c = String.fromCharCode(i);
-          if (c === "\\") {
-            c = "";
-          }
-        } else {
-          c = String(i);
-          if (pad) {
-            const need = width - c.length;
-            if (need > 0) {
-              const z = new Array(need + 1).join("0");
-              if (i < 0) {
-                c = "-" + z + c.slice(1);
-              } else {
-                c = z + c;
-              }
-            }
-          }
+      let dropsEmpties = dropEmpties && !m.post.length && !pre;
+      for (let d = 0; dropsEmpties && d < acc.length; d++) {
+        if (acc[d]) {
+          dropsEmpties = false;
         }
-        N.push(c);
-      }
-    } else {
-      N = [];
-      for (let j = 0; j < n.length; j++) {
-        N.push.apply(N, expand_(n[j], max, false));
       }
-    }
-    for (let j = 0; j < N.length; j++) {
-      for (let k = 0; k < post.length && expansions.length < max; k++) {
-        const expansion = pre + N[j] + post[k];
-        if (!isTop || isSequence || expansion) {
-          expansions.push(expansion);
+      values = [];
+      let valuesLength = 0;
+      outer: for (let j = 0; j < n.length; j++) {
+        const expanded = expand_(n[j], max, maxLength, false);
+        for (let k = 0; k < expanded.length; k++) {
+          const v = expanded[k];
+          if (dropsEmpties && !v)
+            continue;
+          if (values.length >= max || valuesLength + v.length > maxLength) {
+            break outer;
+          }
+          values.push(v);
+          valuesLength += v.length;
         }
       }
     }
-    return expansions;
+    acc = combine(acc, pre, values, max, maxLength, dropEmpties && !m.post.length);
+    if (!m.post.length)
+      break;
+    str = m.post;
   }
+  return acc;
 }
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/assert-valid-pattern.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/assert-valid-pattern.js
 var MAX_PATTERN_LENGTH = 1024 * 64;
 var assertValidPattern = (pattern) => {
   if (typeof pattern !== "string") {
@@ -1460,7 +1509,7 @@ var assertValidPattern = (pattern) => {
   }
 };
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/brace-expressions.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/brace-expressions.js
 var posixClasses = {
   "[:alnum:]": ["\\p{L}\\p{Nl}\\p{Nd}", true],
   "[:alpha:]": ["\\p{L}\\p{Nl}", true],
@@ -1569,7 +1618,7 @@ var parseClass = (glob, position) => {
   return [comb, uflag, endPos - pos, true];
 };
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/unescape.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/unescape.js
 var unescape = (s, { windowsPathsNoEscape = false, magicalBraces = true } = {}) => {
   if (magicalBraces) {
     return windowsPathsNoEscape ? s.replace(/\[([^/\\])\]/g, "$1") : s.replace(/((?!\\).|^)\[([^/\\])\]/g, "$1$2").replace(/\\([^/])/g, "$1");
@@ -1577,7 +1626,7 @@ var unescape = (s, { windowsPathsNoEscape = false, magicalBraces = true } = {})
   return windowsPathsNoEscape ? s.replace(/\[([^/\\{}])\]/g, "$1") : s.replace(/((?!\\).|^)\[([^/\\{}])\]/g, "$1$2").replace(/\\([^/{}])/g, "$1");
 };
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/ast.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/ast.js
 var _a;
 var types = /* @__PURE__ */ new Set(["!", "?", "+", "*", "@"]);
 var isExtglobType = (c) => types.has(c);
@@ -2221,7 +2270,7 @@ var AST = class {
 };
 _a = AST;
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/escape.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/escape.js
 var escape = (s, { windowsPathsNoEscape = false, magicalBraces = false } = {}) => {
   if (magicalBraces) {
     return windowsPathsNoEscape ? s.replace(/[?*()[\]{}]/g, "[$&]") : s.replace(/[?*()[\]\\{}]/g, "\\$&");
@@ -2229,7 +2278,7 @@ var escape = (s, { windowsPathsNoEscape = false, magicalBraces = false } = {}) =
   return windowsPathsNoEscape ? s.replace(/[?*()[\]]/g, "[$&]") : s.replace(/[?*()[\]\\]/g, "\\$&");
 };
 
-// ../../node_modules/.vlt/~npm~minimatch@10.2.5/node_modules/minimatch/dist/esm/index.js
+// ../../node_modules/.vlt/~npm~minimatch@10.2.6/node_modules/minimatch/dist/esm/index.js
 var minimatch = (p, pattern, options = {}) => {
   assertValidPattern(pattern);
   if (!options.nocomment && pattern.charAt(0) === "#") {

package/{chunk-W2Q5EIMH.js → chunk-R55OHZ2R.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-RIYFGX27.js";
 import {
   createHostContextsMap
-} from "./chunk-TMBNGWXK.js";
+} from "./chunk-MZIM7X37.js";
 import {
   stderr,
   stdout,
@@ -27,10 +27,10 @@ import {
   Query,
   actual,
   isRunResult
-} from "./chunk-LZGKX7JI.js";
+} from "./chunk-OR5LSCSK.js";
 import {
   Monorepo
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-PDLEQEZ3.js";
 import {
   isErrorWithCause
 } from "./chunk-IITIX4ID.js";

package/{chunk-5UPPEUG2.js → chunk-RB6SUM6U.js}

@@ -11,14 +11,14 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-G7UPIJAP.js";
+} from "./chunk-AK3RSABL.js";
 import {
   findCmdShimIfExists,
   install
-} from "./chunk-LZGKX7JI.js";
+} from "./chunk-OR5LSCSK.js";
 import {
   PathScurry
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-PDLEQEZ3.js";
 import {
   Spec
 } from "./chunk-XU5SMHXP.js";

package/chunk-SKQHW56B.js

@@ -0,0 +1,75 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+import {
+  error
+} from "./chunk-WZWDS3W4.js";
+import {
+  __glob
+} from "./chunk-PZLD7RTK.js";
+
+// import("./commands/**/*.ts") in ../../src/cli-sdk/src/load-command.ts
+var globImport_commands_ts = __glob({
+  "./commands/access.ts": () => import("./access-RYNHM3DJ.js"),
+  "./commands/bugs.ts": () => import("./bugs-ZHOC4U52.js"),
+  "./commands/build.ts": () => import("./build-HTM6Z7OQ.js"),
+  "./commands/cache.ts": () => import("./cache-74GIE5TO.js"),
+  "./commands/ci.ts": () => import("./ci-XT7IAX2Y.js"),
+  "./commands/config.ts": () => import("./config-B2LF4SJ7.js"),
+  "./commands/create.ts": () => import("./create-VKNML6FC.js"),
+  "./commands/deprecate.ts": () => import("./deprecate-IM4HEDIP.js"),
+  "./commands/dist-tag.ts": () => import("./dist-tag-EKVJAQ66.js"),
+  "./commands/docs.ts": () => import("./docs-4DHMAMOU.js"),
+  "./commands/exec-cache.ts": () => import("./exec-cache-QTUCQWSA.js"),
+  "./commands/exec-local.ts": () => import("./exec-local-ZCNI2JHK.js"),
+  "./commands/exec.ts": () => import("./exec-7C74Z3WB.js"),
+  "./commands/help.ts": () => import("./help-IKRPBT2R.js"),
+  "./commands/init.ts": () => import("./init-PCQ4YK7R.js"),
+  "./commands/install.ts": () => import("./install-OAQ4K3XX.js"),
+  "./commands/install/reporter.ts": () => import("./reporter-6BFJCFVZ.js"),
+  "./commands/list.ts": () => import("./list-WYBKBCZU.js"),
+  "./commands/login.ts": () => import("./login-TTRCQ43Z.js"),
+  "./commands/logout.ts": () => import("./logout-3J77F4OO.js"),
+  "./commands/pack.ts": () => import("./pack-ZLFGYGVZ.js"),
+  "./commands/ping.ts": () => import("./ping-IRLV5C4D.js"),
+  "./commands/pkg.ts": () => import("./pkg-EKOQ4XKM.js"),
+  "./commands/profile.ts": () => import("./profile-7UBKGJBP.js"),
+  "./commands/publish.ts": () => import("./publish-2ODYT4R2.js"),
+  "./commands/query.ts": () => import("./query-ADSAKEK4.js"),
+  "./commands/registry.ts": () => import("./registry-CZPFR3OF.js"),
+  "./commands/repo.ts": () => import("./repo-3THXRT64.js"),
+  "./commands/run-exec.ts": () => import("./run-exec-VYD2Q4BD.js"),
+  "./commands/run.ts": () => import("./run-2QLSVP6M.js"),
+  "./commands/setup.ts": () => import("./setup-TDX5NXUN.js"),
+  "./commands/token.ts": () => import("./token-3RDRZ4AO.js"),
+  "./commands/uninstall.ts": () => import("./uninstall-CNAFZTLA.js"),
+  "./commands/unpublish.ts": () => import("./unpublish-7YHQQYZG.js"),
+  "./commands/update.ts": () => import("./update-3W27EZWN.js"),
+  "./commands/version.ts": () => import("./version-K37LT6GZ.js"),
+  "./commands/view.ts": () => import("./view-ZVAYKUL2.js"),
+  "./commands/whoami.ts": () => import("./whoami-IOUW56D6.js")
+});
+
+// ../../src/cli-sdk/src/load-command.ts
+var loadCommand = async (command) => {
+  try {
+    return await globImport_commands_ts(`./commands/${command}.ts`);
+  } catch (e) {
+    throw error("Could not load command", {
+      found: command,
+      cause: e
+    });
+  }
+};
+
+export {
+  loadCommand
+};

package/{chunk-5B23EKN4.js → chunk-WNDUKE42.js}

@@ -23,6 +23,9 @@ import {
 import {
   XDG
 } from "./chunk-XNLSTHDK.js";
+import {
+  defaultRegistryName
+} from "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -250,16 +253,20 @@ var __CODE_SPLIT_SCRIPT_NAME = resolve(import.meta.dirname, "security-archive-sr
 // ../../src/security-archive/src/index.ts
 var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
 var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
-var targetSecurityRegisty = "https://registry.npmjs.org/";
-var usesTargetRegistry = (node) => {
-  const depID = node.id;
-  const specOptions = node.options;
-  const [nodeType, nodeRegistry] = splitDepID(depID);
-  if (nodeType !== "registry") {
-    return false;
-  }
-  const reg = specOptions.registries?.[nodeRegistry];
-  return reg === targetSecurityRegisty;
+var npmRegistryURL = "https://registry.npmjs.org/";
+var normalizeRegistryURL = (url) => url.endsWith("/") ? url : `${url}/`;
+var nodeRegistryURL = (node) => {
+  const [type, reg] = splitDepID(node.id);
+  if (type !== "registry") return;
+  const url = /^https?:\/\//.test(reg) ? reg : node.options.registries?.[reg];
+  return url ? normalizeRegistryURL(url) : void 0;
+};
+var usesNpmRegistry = (node) => {
+  const origin = nodeRegistryURL(node);
+  if (!origin) return false;
+  if (origin === npmRegistryURL) return true;
+  const npmAlias = node.options.registries?.[defaultRegistryName];
+  return !!npmAlias && normalizeRegistryURL(npmAlias) === origin;
 };
 var { version } = loadPackageJson(
   import.meta.filename,
@@ -412,7 +419,7 @@ var SecurityArchive = class _SecurityArchive extends I {
     const queue = /* @__PURE__ */ new Set();
     for (const node of this.#nodesByID.values()) {
       const normalizedId = baseDepID(node.id);
-      if (usesTargetRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
+      if (usesNpmRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
         const purl = `pkg:npm/${node.name}@${node.version}`;
         queue.add({ purl });
       }
@@ -512,12 +519,12 @@ var SecurityArchive = class _SecurityArchive extends I {
     }
   }
   /**
-   * Validates that all public-registry packages in the nodes
+   * Validates that all npm-ecosystem packages in the nodes
    * have a valid report data in the current in-memory cache.
    */
   #validateReportData() {
     for (const node of this.#nodesByID.values()) {
-      if (usesTargetRegistry(node)) {
+      if (usesNpmRegistry(node)) {
         if (!this.has(baseDepID(node.id))) {
           this.ok = false;
           return;

package/{chunk-UAAZW4N6.js → chunk-YRKCPGWZ.js}

@@ -13,10 +13,10 @@ import {
   Ct,
   Qn,
   require_lib
-} from "./chunk-FWKQ7YDF.js";
+} from "./chunk-ZWKI5OSF.js";
 import {
   minimatch
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-PDLEQEZ3.js";
 import {
   Spec
 } from "./chunk-XU5SMHXP.js";