@vltpkg/cli-js 1.0.3 → 1.0.5

package/{chunk-T4GYDWUJ.js → chunk-5JFRXIK2.js}

@@ -10,8 +10,9 @@ globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
-  defaultRegistries
-} from "./chunk-IITIX4ID.js";
+  defaultRegistries,
+  defaultRegistryName
+} from "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -67,6 +68,17 @@ var missingRegistryError = () => error(
   ].join("\n"),
   { code: "ECONFIG" }
 );
+var missingNpmRegistryError = (alias = defaultRegistryName) => error(
+  [
+    `Missing ${alias} registry configuration.`,
+    "",
+    `Install commands require the \`registries.${alias}\` alias.`,
+    "Run `vlt setup` to get configured.",
+    "",
+    "See https://docs.vlt.sh/cli for other ways to set a registry."
+  ].join("\n"),
+  { code: "ECONFIG" }
+);
 var ambiguousRegistryError = (candidates) => error(
   [
     "Multiple registries are configured; specify which one to use.",
@@ -95,6 +107,7 @@ var gatherCandidates = (conf) => {
   return Object.entries(conf.options.registries).filter(([alias, url]) => builtins[alias] !== url).map(([alias, url]) => ({ alias, url }));
 };
 var hasConfiguredRegistry = (conf) => !!conf.options.registry || gatherCandidates(conf).length > 0;
+var hasNpmRegistry = (conf) => !!conf.options.registries[conf.options["default-registry-alias"]];
 var requireRegistry = (conf, alias) => {
   if (alias !== void 0) return resolveRegistryAlias(conf, alias);
   const { registry } = conf.options;
@@ -131,7 +144,9 @@ var resolveRegistry = async (conf, {
 
 export {
   missingRegistryError,
+  missingNpmRegistryError,
   hasConfiguredRegistry,
+  hasNpmRegistry,
   requireRegistry,
   resolveRegistry
 };

package/{chunk-E737X73P.js → chunk-AL42Z2D3.js}

@@ -20,15 +20,17 @@ import {
 } from "./chunk-G2YT2GWF.js";
 import {
   parseError
-} from "./chunk-VB3IWNHX.js";
+} from "./chunk-GDJ7JT2R.js";
 import {
   hasConfiguredRegistry,
+  hasNpmRegistry,
+  missingNpmRegistryError,
   missingRegistryError
-} from "./chunk-T4GYDWUJ.js";
+} from "./chunk-5JFRXIK2.js";
 import {
   isGraphRunError,
   splitDepID
-} from "./chunk-OCJDISSI.js";
+} from "./chunk-3OPNZI6G.js";
 import {
   defaultView
 } from "./chunk-WP6CYBPM.js";
@@ -46,7 +48,7 @@ import {
 import {
   isErrorWithCause,
   isObject
-} from "./chunk-IITIX4ID.js";
+} from "./chunk-VFBCWAOC.js";
 
 // ../../src/cli-sdk/src/print-err.ts
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -493,7 +495,7 @@ var startView = async (conf, opts, views, { start } = { start: Date.now() }) =>
 var outputCommand = async (cliCommand, conf, { start, vltVersion } = {
   start: Date.now()
 }) => {
-  const { usage, views, command, needsRegistry } = cliCommand;
+  const { usage, views, command, needsRegistry, needsNpmRegistry } = cliCommand;
   const stdoutColor = conf.values.color ?? supportsColor2(process.stdout);
   const stderrColor = conf.values.color ?? supportsColor2(process.stderr);
   if (conf.values.help) {
@@ -525,6 +527,11 @@ var outputCommand = async (cliCommand, conf, { start, vltVersion } = {
     if (needsRegistry && !hasConfiguredRegistry(conf)) {
       throw missingRegistryError();
     }
+    if (needsNpmRegistry && !hasNpmRegistry(conf)) {
+      throw missingNpmRegistryError(
+        conf.options["default-registry-alias"]
+      );
+    }
     const output = await onDone(await command(conf));
     stopRequestLog();
     const duration_ms = Date.now() - start;

package/{chunk-5B23EKN4.js → chunk-ED2DDTQT.js}

@@ -13,7 +13,7 @@ import {
   asDepID,
   baseDepID,
   splitDepID
-} from "./chunk-OCJDISSI.js";
+} from "./chunk-3OPNZI6G.js";
 import {
   loadPackageJson
 } from "./chunk-E74WGW5C.js";
@@ -23,6 +23,9 @@ import {
 import {
   XDG
 } from "./chunk-XNLSTHDK.js";
+import {
+  defaultRegistryName
+} from "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -250,16 +253,20 @@ var __CODE_SPLIT_SCRIPT_NAME = resolve(import.meta.dirname, "security-archive-sr
 // ../../src/security-archive/src/index.ts
 var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
 var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
-var targetSecurityRegisty = "https://registry.npmjs.org/";
-var usesTargetRegistry = (node) => {
-  const depID = node.id;
-  const specOptions = node.options;
-  const [nodeType, nodeRegistry] = splitDepID(depID);
-  if (nodeType !== "registry") {
-    return false;
-  }
-  const reg = specOptions.registries?.[nodeRegistry];
-  return reg === targetSecurityRegisty;
+var npmRegistryURL = "https://registry.npmjs.org/";
+var normalizeRegistryURL = (url) => url.endsWith("/") ? url : `${url}/`;
+var nodeRegistryURL = (node) => {
+  const [type, reg] = splitDepID(node.id);
+  if (type !== "registry") return;
+  const url = /^https?:\/\//.test(reg) ? reg : node.options.registries?.[reg];
+  return url ? normalizeRegistryURL(url) : void 0;
+};
+var usesNpmRegistry = (node) => {
+  const origin = nodeRegistryURL(node);
+  if (!origin) return false;
+  if (origin === npmRegistryURL) return true;
+  const npmAlias = node.options.registries?.[defaultRegistryName];
+  return !!npmAlias && normalizeRegistryURL(npmAlias) === origin;
 };
 var { version } = loadPackageJson(
   import.meta.filename,
@@ -412,7 +419,7 @@ var SecurityArchive = class _SecurityArchive extends I {
     const queue = /* @__PURE__ */ new Set();
     for (const node of this.#nodesByID.values()) {
       const normalizedId = baseDepID(node.id);
-      if (usesTargetRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
+      if (usesNpmRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
         const purl = `pkg:npm/${node.name}@${node.version}`;
         queue.add({ purl });
       }
@@ -512,12 +519,12 @@ var SecurityArchive = class _SecurityArchive extends I {
     }
   }
   /**
-   * Validates that all public-registry packages in the nodes
+   * Validates that all npm-ecosystem packages in the nodes
    * have a valid report data in the current in-memory cache.
    */
   #validateReportData() {
     for (const node of this.#nodesByID.values()) {
-      if (usesTargetRegistry(node)) {
+      if (usesNpmRegistry(node)) {
         if (!this.has(baseDepID(node.id))) {
           this.ok = false;
           return;

package/{chunk-XQSBCMSC.js → chunk-FBHWUWBW.js}

@@ -12,12 +12,12 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   init,
   install
-} from "./chunk-LZGKX7JI.js";
+} from "./chunk-3NGV7EC6.js";
 import {
   asWSConfig,
   assertWSConfig,
   minimatch
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-SVBEF5PK.js";
 import {
   commandUsage
 } from "./chunk-LCDBW6IT.js";

package/{chunk-VB3IWNHX.js → chunk-GDJ7JT2R.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   isError,
   isObject
-} from "./chunk-IITIX4ID.js";
+} from "./chunk-VFBCWAOC.js";
 
 // ../../src/output/src/error.ts
 var parseError = (err) => {

package/{chunk-5QJEOGEM.js → chunk-JFO2EQA5.js}

@@ -19,7 +19,7 @@ var run = async (command) => {
   if (command) {
     process.argv.splice(2, 0, command);
   }
-  const vlt = await import("./src-2NB67FPG.js");
+  const vlt = await import("./src-ARXB4NH5.js");
   await vlt.default();
 };
 

package/{chunk-5UPPEUG2.js → chunk-K55EFH4U.js}

@@ -11,17 +11,17 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-G7UPIJAP.js";
+} from "./chunk-YZPRRP7W.js";
 import {
   findCmdShimIfExists,
   install
-} from "./chunk-LZGKX7JI.js";
+} from "./chunk-3NGV7EC6.js";
 import {
   PathScurry
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-SVBEF5PK.js";
 import {
   Spec
-} from "./chunk-XU5SMHXP.js";
+} from "./chunk-XKVU23NC.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
@@ -30,7 +30,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   parseScope
-} from "./chunk-IITIX4ID.js";
+} from "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-UAAZW4N6.js → chunk-QWTGTFHN.js}

@@ -13,13 +13,13 @@ import {
   Ct,
   Qn,
   require_lib
-} from "./chunk-FWKQ7YDF.js";
+} from "./chunk-ZWKI5OSF.js";
 import {
   minimatch
-} from "./chunk-FFOXTPQA.js";
+} from "./chunk-SVBEF5PK.js";
 import {
   Spec
-} from "./chunk-XU5SMHXP.js";
+} from "./chunk-XKVU23NC.js";
 import {
   parse,
   stringify