@vltpkg/cli-js 1.0.4 → 1.0.6

package/registry-client-src-revalidate.js

@@ -2744,9 +2744,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve10, reject) => {
+          return new Promise((resolve11, reject) => {
             this.close((err, data) => {
-              return err ? reject(err) : resolve10(data);
+              return err ? reject(err) : resolve11(data);
             });
           });
         }
@@ -2784,9 +2784,9 @@ var require_dispatcher_base = __commonJS({
           err = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve10, reject) => {
+          return new Promise((resolve11, reject) => {
             this.destroy(err, (err2, data) => {
-              return err2 ? reject(err2) : resolve10(data);
+              return err2 ? reject(err2) : resolve11(data);
             });
           });
         }
@@ -6283,8 +6283,8 @@ var require_promise = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise = new Promise((resolve10, reject) => {
-        res = resolve10;
+      const promise = new Promise((resolve11, reject) => {
+        res = resolve11;
         rej = reject;
       });
       return { promise, resolve: res, reject: rej };
@@ -7688,12 +7688,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve10, reject) => {
+      const waitForDrain = () => new Promise((resolve11, reject) => {
         assert(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve10;
+          callback = resolve11;
         }
       });
       socket.on("close", onDrain).on("drain", onDrain);
@@ -8538,12 +8538,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve10, reject) => {
+      const waitForDrain = () => new Promise((resolve11, reject) => {
         assert(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve10;
+          callback = resolve11;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -8859,16 +8859,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       [kClose]() {
-        return new Promise((resolve10) => {
+        return new Promise((resolve11) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve10;
+            this[kClosedResolve] = resolve11;
           } else {
-            resolve10(null);
+            resolve11(null);
           }
         });
       }
       [kDestroy](err) {
-        return new Promise((resolve10) => {
+        return new Promise((resolve11) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i2 = 0; i2 < requests.length; i2++) {
             const request2 = requests[i2];
@@ -8879,7 +8879,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve10(null);
+            resolve11(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err, callback);
@@ -9284,8 +9284,8 @@ var require_pool_base = __commonJS({
           }
           return Promise.all(closeAll);
         } else {
-          return new Promise((resolve10) => {
-            this[kClosedResolve] = resolve10;
+          return new Promise((resolve11) => {
+            this[kClosedResolve] = resolve11;
           });
         }
       }
@@ -10402,7 +10402,7 @@ var require_socks5_proxy_agent = __commonJS({
         const proxyHost = this[kProxyUrl].hostname;
         const proxyPort = parseInt(this[kProxyUrl].port) || 1080;
         debug2("creating SOCKS5 connection to", proxyHost, proxyPort);
-        const socket = await new Promise((resolve10, reject) => {
+        const socket = await new Promise((resolve11, reject) => {
           this[kConnector]({
             hostname: proxyHost,
             host: proxyHost,
@@ -10412,7 +10412,7 @@ var require_socks5_proxy_agent = __commonJS({
             if (err) {
               reject(err);
             } else {
-              resolve10(socket2);
+              resolve11(socket2);
             }
           });
         });
@@ -10422,14 +10422,14 @@ var require_socks5_proxy_agent = __commonJS({
           socket.destroy();
         });
         await socks5Client.handshake();
-        await new Promise((resolve10, reject) => {
+        await new Promise((resolve11, reject) => {
           const timeout = setTimeout(() => {
             reject(new Error("SOCKS5 authentication timeout"));
           }, 5e3);
           const onAuthenticated = () => {
             clearTimeout(timeout);
             socks5Client.removeListener("error", onError);
-            resolve10();
+            resolve11();
           };
           const onError = (err) => {
             clearTimeout(timeout);
@@ -10438,14 +10438,14 @@ var require_socks5_proxy_agent = __commonJS({
           };
           if (socks5Client.state === STATES.AUTHENTICATED) {
             clearTimeout(timeout);
-            resolve10();
+            resolve11();
           } else {
             socks5Client.once("authenticated", onAuthenticated);
             socks5Client.once("error", onError);
           }
         });
         await socks5Client.connect(targetHost, targetPort);
-        await new Promise((resolve10, reject) => {
+        await new Promise((resolve11, reject) => {
           const timeout = setTimeout(() => {
             reject(new Error("SOCKS5 connection timeout"));
           }, 5e3);
@@ -10453,7 +10453,7 @@ var require_socks5_proxy_agent = __commonJS({
             debug2("SOCKS5 tunnel established to", targetHost, targetPort, "via", info);
             clearTimeout(timeout);
             socks5Client.removeListener("error", onError);
-            resolve10();
+            resolve11();
           };
           const onError = (err) => {
             clearTimeout(timeout);
@@ -10496,8 +10496,8 @@ var require_socks5_proxy_agent = __commonJS({
                       socket,
                       servername: this[kRequestTls]?.servername || targetHost
                     });
-                    await new Promise((resolve10, reject) => {
-                      finalSocket.once("secureConnect", resolve10);
+                    await new Promise((resolve11, reject) => {
+                      finalSocket.once("secureConnect", resolve11);
                       finalSocket.once("error", reject);
                     });
                   }
@@ -11553,7 +11553,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return Promise.resolve(null);
         }
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve11, reject) => {
           if (this[kContentLength] && this[kContentLength] > limit || this[kBytesRead] > limit) {
             this.destroy(new AbortError());
           }
@@ -11567,11 +11567,11 @@ var require_readable = __commonJS({
               if (signal.aborted) {
                 reject(signal.reason ?? new AbortError());
               } else {
-                resolve10(null);
+                resolve11(null);
               }
             });
           } else {
-            this.on("close", resolve10);
+            this.on("close", resolve11);
           }
           this.on("error", noop).on("data", () => {
             if (this[kBytesRead] > limit) {
@@ -11599,7 +11599,7 @@ var require_readable = __commonJS({
     }
     function consume(stream, type) {
       assert(!stream[kConsume]);
-      return new Promise((resolve10, reject) => {
+      return new Promise((resolve11, reject) => {
         if (isUnusable(stream)) {
           const rState = stream._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -11614,7 +11614,7 @@ var require_readable = __commonJS({
             stream[kConsume] = {
               type,
               stream,
-              resolve: resolve10,
+              resolve: resolve11,
               reject,
               length: 0,
               body: []
@@ -11688,18 +11688,18 @@ var require_readable = __commonJS({
       return buffer;
     }
     function consumeEnd(consume2, encoding) {
-      const { type, body, resolve: resolve10, stream, length } = consume2;
+      const { type, body, resolve: resolve11, stream, length } = consume2;
       try {
         if (type === "text") {
-          resolve10(chunksDecode(body, length, encoding));
+          resolve11(chunksDecode(body, length, encoding));
         } else if (type === "json") {
-          resolve10(JSON.parse(chunksDecode(body, length, encoding)));
+          resolve11(JSON.parse(chunksDecode(body, length, encoding)));
         } else if (type === "arrayBuffer") {
-          resolve10(chunksConcat(body, length).buffer);
+          resolve11(chunksConcat(body, length).buffer);
         } else if (type === "blob") {
-          resolve10(new Blob(body, { type: stream[kContentType] }));
+          resolve11(new Blob(body, { type: stream[kContentType] }));
         } else if (type === "bytes") {
-          resolve10(chunksConcat(body, length));
+          resolve11(chunksConcat(body, length));
         }
         consumeFinish(consume2);
       } catch (err) {
@@ -11889,9 +11889,9 @@ var require_api_request = __commonJS({
     };
     function request2(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve11, reject) => {
           request2.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve10(data);
+            return err ? reject(err) : resolve11(data);
           });
         });
       }
@@ -12103,9 +12103,9 @@ var require_api_stream = __commonJS({
     };
     function stream(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve11, reject) => {
           stream.call(this, opts, factory, (err, data) => {
-            return err ? reject(err) : resolve10(data);
+            return err ? reject(err) : resolve11(data);
           });
         });
       }
@@ -12393,9 +12393,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve11, reject) => {
           upgrade.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve10(data);
+            return err ? reject(err) : resolve11(data);
           });
         });
       }
@@ -12488,9 +12488,9 @@ var require_api_connect = __commonJS({
     };
     function connect(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve11, reject) => {
           connect.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve10(data);
+            return err ? reject(err) : resolve11(data);
           });
         });
       }
@@ -13763,8 +13763,8 @@ var require_snapshot_utils = __commonJS({
 var require_snapshot_recorder = __commonJS({
   "../../node_modules/.vlt/~npm~undici@7.29.0/node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module3) {
     "use strict";
-    var { writeFile: writeFile3, readFile: readFile3, mkdir: mkdir3 } = __require("node:fs/promises");
-    var { dirname: dirname5, resolve: resolve10 } = __require("node:path");
+    var { writeFile: writeFile3, readFile: readFile4, mkdir: mkdir3 } = __require("node:fs/promises");
+    var { dirname: dirname5, resolve: resolve11 } = __require("node:path");
     var { setTimeout: setTimeout4, clearTimeout: clearTimeout2 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -13965,7 +13965,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile3(resolve10(path2), "utf8");
+          const data = await readFile4(resolve11(path2), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -13994,7 +13994,7 @@ var require_snapshot_recorder = __commonJS({
         if (!path2) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve10(path2);
+        const resolvedPath = resolve11(path2);
         await mkdir3(dirname5(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
@@ -15799,18 +15799,18 @@ var require_cache = __commonJS({
         }
       }
     }
-    function makeDeduplicationKey(cacheKey, excludeHeaders) {
+    function makeDeduplicationKey(cacheKey2, excludeHeaders) {
       const headers = {};
-      if (cacheKey.headers) {
-        const sortedHeaders = Object.keys(cacheKey.headers).sort();
+      if (cacheKey2.headers) {
+        const sortedHeaders = Object.keys(cacheKey2.headers).sort();
         for (const header of sortedHeaders) {
           if (excludeHeaders?.has(header.toLowerCase())) {
             continue;
           }
-          headers[header] = cacheKey.headers[header];
+          headers[header] = cacheKey2.headers[header];
         }
       }
-      return JSON.stringify([cacheKey.origin, cacheKey.method, cacheKey.path, headers]);
+      return JSON.stringify([cacheKey2.origin, cacheKey2.method, cacheKey2.path, headers]);
     }
     module3.exports = {
       makeCacheKey,
@@ -16384,7 +16384,7 @@ var require_cache_handler = __commonJS({
         }
       }
     }
-    function getSameOriginPath(cacheKey, location) {
+    function getSameOriginPath(cacheKey2, location) {
       if (typeof location !== "string") {
         return void 0;
       }
@@ -16392,8 +16392,8 @@ var require_cache_handler = __commonJS({
       let requestUrl;
       let locationUrl;
       try {
-        originUrl = new URL(cacheKey.origin);
-        requestUrl = new URL(cacheKey.path, originUrl);
+        originUrl = new URL(cacheKey2.origin);
+        requestUrl = new URL(cacheKey2.path, originUrl);
         locationUrl = new URL(location, requestUrl);
       } catch {
         return void 0;
@@ -16403,38 +16403,38 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey, path2) {
+    function deleteCachedUri(store, cacheKey2, path2) {
       deleteCachedValue(store, {
-        ...cacheKey,
+        ...cacheKey2,
         path: path2
       });
       for (let i2 = 0; i2 < util.safeHTTPMethods.length; i2++) {
         const method = util.safeHTTPMethods[i2];
-        if (method !== cacheKey.method) {
+        if (method !== cacheKey2.method) {
           deleteCachedValue(store, {
-            ...cacheKey,
+            ...cacheKey2,
             method,
             path: path2
           });
         }
       }
     }
-    function deleteLocationTargets(store, cacheKey, headerValue) {
+    function deleteLocationTargets(store, cacheKey2, headerValue) {
       if (headerValue === void 0) {
         return;
       }
       const values = Array.isArray(headerValue) ? headerValue : [headerValue];
       for (let i2 = 0; i2 < values.length; i2++) {
-        const path2 = getSameOriginPath(cacheKey, values[i2]);
+        const path2 = getSameOriginPath(cacheKey2, values[i2]);
         if (path2 !== void 0) {
-          deleteCachedUri(store, cacheKey, path2);
+          deleteCachedUri(store, cacheKey2, path2);
         }
       }
     }
-    function invalidateUnsafeRequest(store, cacheKey, resHeaders) {
-      deleteCachedUri(store, cacheKey, cacheKey.path);
-      deleteLocationTargets(store, cacheKey, resHeaders.location);
-      deleteLocationTargets(store, cacheKey, resHeaders["content-location"]);
+    function invalidateUnsafeRequest(store, cacheKey2, resHeaders) {
+      deleteCachedUri(store, cacheKey2, cacheKey2.path);
+      deleteLocationTargets(store, cacheKey2, resHeaders.location);
+      deleteLocationTargets(store, cacheKey2, resHeaders["content-location"]);
     }
     var CacheHandler = class {
       /**
@@ -16466,11 +16466,11 @@ var require_cache_handler = __commonJS({
        * @param {import('../../types/cache-interceptor.d.ts').default.CacheKey} cacheKey
        * @param {import('../../types/dispatcher.d.ts').default.DispatchHandler} handler
        */
-      constructor({ store, type, cacheByDefault }, cacheKey, handler) {
+      constructor({ store, type, cacheByDefault }, cacheKey2, handler) {
         this.#store = store;
         this.#cacheType = type;
         this.#cacheByDefault = cacheByDefault;
-        this.#cacheKey = cacheKey;
+        this.#cacheKey = cacheKey2;
         this.#handler = handler;
       }
       onRequestStart(controller, context) {
@@ -16659,15 +16659,15 @@ var require_cache_handler = __commonJS({
         this.#handler.onResponseError?.(controller, err);
       }
     };
-    function deleteCachedValue(store, cacheKey) {
+    function deleteCachedValue(store, cacheKey2) {
       try {
-        store.delete(cacheKey)?.catch?.(noop);
+        store.delete(cacheKey2)?.catch?.(noop);
       } catch {
       }
     }
-    function deleteCachedValueIfNotModified(statusCode, store, cacheKey) {
+    function deleteCachedValueIfNotModified(statusCode, store, cacheKey2) {
       if (statusCode === 304) {
-        deleteCachedValue(store, cacheKey);
+        deleteCachedValue(store, cacheKey2);
       }
     }
     function revalidationResponseDisallowsCachedReuse(cacheType, resHeaders, cacheControlDirectives) {
@@ -17230,9 +17230,9 @@ var require_cache2 = __commonJS({
     function revalidationResponseUpdatesCacheControl(headers) {
       return headers["cache-control"] !== void 0;
     }
-    function deleteCachedValue(store, cacheKey) {
+    function deleteCachedValue(store, cacheKey2) {
       try {
-        store.delete(cacheKey)?.catch?.(nop);
+        store.delete(cacheKey2)?.catch?.(nop);
       } catch {
       }
     }
@@ -17284,7 +17284,7 @@ var require_cache2 = __commonJS({
       const staleWhileRevalidateExpiry = result.staleAt + staleWhileRevalidate * 1e3;
       return now <= staleWhileRevalidateExpiry;
     }
-    function handleUncachedResponse(dispatch, globalOpts, cacheKey, handler, opts, reqCacheControl) {
+    function handleUncachedResponse(dispatch, globalOpts, cacheKey2, handler, opts, reqCacheControl) {
       if (reqCacheControl?.["only-if-cached"]) {
         let aborted = false;
         try {
@@ -17312,7 +17312,7 @@ var require_cache2 = __commonJS({
         }
         return true;
       }
-      return dispatch(opts, new CacheHandler(globalOpts, cacheKey, handler));
+      return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler));
     }
     function sendCachedValue(handler, opts, result, age, context, isStale2) {
       const stream = util.isStream(result.body) ? result.body : Readable.from(result.body ?? []);
@@ -17368,13 +17368,13 @@ var require_cache2 = __commonJS({
         });
       }
     }
-    function handleResult(dispatch, globalOpts, cacheKey, handler, opts, reqCacheControl, result) {
+    function handleResult(dispatch, globalOpts, cacheKey2, handler, opts, reqCacheControl, result) {
       if (!result) {
-        return handleUncachedResponse(dispatch, globalOpts, cacheKey, handler, opts, reqCacheControl);
+        return handleUncachedResponse(dispatch, globalOpts, cacheKey2, handler, opts, reqCacheControl);
       }
       const now = Date.now();
       if (now > result.deleteAt) {
-        return dispatch(opts, new CacheHandler(globalOpts, cacheKey, handler));
+        return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler));
       }
       const age = Math.round((now - result.cachedAt) / 1e3);
       const requestMaxAgeExpired = reqCacheControl?.["max-age"] !== void 0 && age >= reqCacheControl["max-age"];
@@ -17382,7 +17382,7 @@ var require_cache2 = __commonJS({
       const revalidate = requestMaxAgeExpired || needsRevalidation(result, reqCacheControl, opts);
       if (stale || revalidate) {
         if (util.isStream(opts.body) && util.bodyLength(opts.body) !== 0) {
-          return dispatch(opts, new CacheHandler(globalOpts, cacheKey, handler));
+          return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler));
         }
         if (!revalidate && withinStaleWhileRevalidateWindow(result, globalOpts.type)) {
           sendCachedValue(handler, opts, result, age, null, true);
@@ -17393,7 +17393,7 @@ var require_cache2 = __commonJS({
                 ...opts,
                 headers: headers2
               },
-              new CacheHandler(globalOpts, cacheKey, {
+              new CacheHandler(globalOpts, cacheKey2, {
                 // Silent handler that just updates the cache
                 onRequestStart() {
                 },
@@ -17433,11 +17433,11 @@ var require_cache2 = __commonJS({
                     if (util.isStream(result.body)) {
                       result.body.on("error", nop).destroy();
                     }
-                    deleteCachedValue(globalOpts.store, cacheKey);
-                    return dispatch(opts, new CacheHandler(globalOpts, cacheKey, handler));
+                    deleteCachedValue(globalOpts.store, cacheKey2);
+                    return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler));
                   }
                   if (revalidationResponseUpdatesCacheControl(headers2)) {
-                    deleteCachedValue(globalOpts.store, cacheKey);
+                    deleteCachedValue(globalOpts.store, cacheKey2);
                   }
                 }
                 sendCachedValue(handler, opts, result, age, context, stale);
@@ -17445,7 +17445,7 @@ var require_cache2 = __commonJS({
                 result.body.on("error", nop).destroy();
               }
             },
-            new CacheHandler(globalOpts, cacheKey, handler),
+            new CacheHandler(globalOpts, cacheKey2, handler),
             withinStaleIfErrorThreshold
           )
         );
@@ -17520,13 +17520,13 @@ var require_cache2 = __commonJS({
           if (reqCacheControl?.["no-store"]) {
             return dispatch(opts2, handler);
           }
-          const cacheKey = makeCacheKey(opts2);
-          const result = store.get(cacheKey);
+          const cacheKey2 = makeCacheKey(opts2);
+          const result = store.get(cacheKey2);
           if (result && typeof result.then === "function") {
             return result.then((result2) => handleResult(
               dispatch,
               globalOpts,
-              cacheKey,
+              cacheKey2,
               handler,
               opts2,
               reqCacheControl,
@@ -17536,7 +17536,7 @@ var require_cache2 = __commonJS({
             return handleResult(
               dispatch,
               globalOpts,
-              cacheKey,
+              cacheKey2,
               handler,
               opts2,
               reqCacheControl,
@@ -18177,8 +18177,8 @@ var require_deduplicate = __commonJS({
               }
             }
           }
-          const cacheKey = makeCacheKey(opts2);
-          const dedupeKey = makeDeduplicationKey(cacheKey, excludeHeaderNamesSet);
+          const cacheKey2 = makeCacheKey(opts2);
+          const dedupeKey = makeDeduplicationKey(cacheKey2, excludeHeaderNamesSet);
           const pendingHandler = pendingRequests.get(dedupeKey);
           if (pendingHandler) {
             if (pendingHandler.addWaitingHandler(handler)) {
@@ -21307,7 +21307,7 @@ var require_fetch = __commonJS({
         const agent = fetchParams.controller.dispatcher;
         const path2 = url.pathname + url.search;
         const hasTrailingQuestionMark = url.search.length === 0 && url.href[url.href.length - url.hash.length - 1] === "?";
-        return new Promise((resolve10, reject) => agent.dispatch(
+        return new Promise((resolve11, reject) => agent.dispatch(
           {
             path: hasTrailingQuestionMark ? `${path2}?` : path2,
             origin: url.origin,
@@ -21395,7 +21395,7 @@ var require_fetch = __commonJS({
                 }
               }
               const onError = this.onError.bind(this);
-              resolve10({
+              resolve11({
                 status,
                 statusText,
                 headersList,
@@ -21448,7 +21448,7 @@ var require_fetch = __commonJS({
                   headersList.append(headerName, String(value), true);
                 }
               }
-              resolve10({
+              resolve11({
                 status,
                 statusText: STATUS_CODES[status],
                 headersList,
@@ -21472,7 +21472,7 @@ var require_fetch = __commonJS({
                   headersList.append(nameStr, value.toString("latin1"), true);
                 }
               }
-              resolve10({
+              resolve11({
                 status,
                 statusText: STATUS_CODES[status],
                 headersList,
@@ -25779,7 +25779,8 @@ var require_dist = __commonJS({
 });
 
 // ../../src/registry-client/src/revalidate.ts
-import { pathToFileURL as pathToFileURL2 } from "node:url";
+import { setPriority } from "node:os";
+import { pathToFileURL } from "node:url";
 
 // ../../src/error-cause/src/index.ts
 var { captureStackTrace } = Error;
@@ -30085,7 +30086,9 @@ var Cache = class _Cache extends I {
         return this.#diskRead(k4, v3, opts.context?.integrity);
       },
       allowStaleOnFetchRejection: true,
-      allowStaleOnFetchAbort: true,
+      // Eviction aborts in-flight fetch() placeholders. Resolving those
+      // as undefined is treated as a cache miss and re-downloads tarballs.
+      ignoreFetchAbort: true,
       allowStale: true,
       noDeleteOnStaleGet: true
     });
@@ -30328,176 +30331,8 @@ import { spawn } from "node:child_process";
 import module from "node:module";
 
 // ../../src/cache-unzip/src/unzip.ts
-import { pathToFileURL } from "node:url";
-import { gunzipSync } from "node:zlib";
-var __CODE_SPLIT_SCRIPT_NAME = import.meta.filename;
-var MAX_DECOMPRESSION_RATIO = 1e3;
-var defaultMaxUnpackedBytes = 2 * 1024 * 1024 * 1024;
-var parseMaxUnpackedBytes = (raw) => {
-  const n7 = Number(raw);
-  return Number.isFinite(n7) && n7 >= 1 ? Math.floor(n7) : defaultMaxUnpackedBytes;
-};
-var maxUnpackedBytes = parseMaxUnpackedBytes(
-  process.env.VLT_TAR_MAX_UNPACKED_BYTES
-);
-var isMain = (path2) => path2 === __CODE_SPLIT_SCRIPT_NAME || path2 === pathToFileURL(__CODE_SPLIT_SCRIPT_NAME).toString();
-var main = async (path2, input = process.stdin) => {
-  if (!path2) {
-    return false;
-  }
-  const keys = await new Promise((res) => {
-    const chunks = [];
-    let chunkLen = 0;
-    input.on("data", (chunk) => {
-      chunks.push(chunk);
-      chunkLen += chunk.length;
-    });
-    input.on("end", () => {
-      res(
-        Buffer.concat(chunks, chunkLen).toString().split("\0").filter((i2) => !!i2)
-      );
-    });
-  });
-  if (!keys.length) {
-    return false;
-  }
-  const cache = new Cache({ path: path2 });
-  const readSize2 = (buf, offset) => {
-    const a2 = buf[offset];
-    const b = buf[offset + 1];
-    const c = buf[offset + 2];
-    const d4 = buf[offset + 3];
-    if (a2 === void 0 || b === void 0 || c === void 0 || d4 === void 0) {
-      throw error("Invalid buffer, not long enough to readSize", {
-        found: buf,
-        offset
-      });
-    }
-    return a2 << 24 | b << 16 | c << 8 | d4;
-  };
-  const results = await Promise.all(
-    keys.map(async (key) => {
-      const buffer = await cache.fetch(key);
-      if (!buffer || buffer.length < 4) return null;
-      const headSizeOriginal = readSize2(buffer, 0);
-      const body = buffer.subarray(headSizeOriginal);
-      if (body[0] === 31 && body[1] === 139) {
-        let unz;
-        try {
-          unz = gunzipSync(body, {
-            maxOutputLength: Math.min(
-              maxUnpackedBytes,
-              body.length * MAX_DECOMPRESSION_RATIO
-            )
-          });
-        } catch (er) {
-          if (er.code !== "ERR_BUFFER_TOO_LARGE") {
-            throw er;
-          }
-          return null;
-        }
-        const headersBuffer = buffer.subarray(7, headSizeOriginal);
-        const headers = [];
-        let i2 = 0;
-        let sawEncoding = false;
-        let isEncoding = false;
-        let isContentLength = false;
-        let isIntegrity = false;
-        let integrity = void 0;
-        while (i2 < headersBuffer.length - 4) {
-          const size = readSize2(headersBuffer, i2);
-          const h = headersBuffer.subarray(i2 + 4, i2 + size);
-          if (isEncoding) {
-            isEncoding = false;
-            headers.push(Buffer.from("identity"));
-          } else if (isContentLength) {
-            isContentLength = false;
-            i2 += size;
-            continue;
-          } else if (isIntegrity) {
-            isIntegrity = false;
-            integrity = h.toString();
-            headers.push(h);
-          } else {
-            if (headers.length % 2 === 0) {
-              if (h.toString().toLowerCase() === "content-length") {
-                isContentLength = true;
-                i2 += size;
-                continue;
-              }
-              if (!sawEncoding && h.toString().toLowerCase() === "content-encoding") {
-                sawEncoding = true;
-                isEncoding = true;
-              } else if (!integrity && h.toString().toLowerCase() === "integrity") {
-                isIntegrity = true;
-              }
-            }
-            headers.push(h);
-          }
-          i2 += size;
-        }
-        if (!sawEncoding) {
-          headers.push(
-            Buffer.from("content-encoding"),
-            Buffer.from("identity")
-          );
-        }
-        headers.push(
-          Buffer.from("content-length"),
-          Buffer.from(String(unz.byteLength))
-        );
-        const sb = buffer.subarray(4, 7);
-        const chunks = [sb];
-        let headLength = sb.byteLength + 4;
-        for (const h of headers) {
-          const hlBuf2 = Buffer.allocUnsafe(4);
-          const hl = h.byteLength + 4;
-          headLength += hl;
-          hlBuf2.set(
-            [
-              hl >> 24 & 255,
-              hl >> 16 & 255,
-              hl >> 8 & 255,
-              hl & 255
-            ],
-            0
-          );
-          chunks.push(hlBuf2, h);
-        }
-        const hlBuf = Buffer.allocUnsafe(4);
-        hlBuf.set(
-          [
-            headLength >> 24 & 255,
-            headLength >> 16 & 255,
-            headLength >> 8 & 255,
-            headLength & 255
-          ],
-          0
-        );
-        chunks.unshift(hlBuf);
-        chunks.push(unz);
-        cache.set(
-          key,
-          Buffer.concat(chunks, headLength + unz.length),
-          {
-            integrity
-          }
-        );
-      }
-      return true;
-    })
-  );
-  await cache.promise();
-  return results.some(Boolean);
-};
-if (isMain(process.argv[1])) {
-  process.title = "vlt-cache-unzip";
-  const path2 = process.argv.length === 2 ? void 0 : process.argv.at(-1);
-  const res = await main(path2, process.stdin);
-  if (!res) {
-    process.exit(1);
-  }
-}
+import { resolve as resolve7 } from "node:path";
+var __CODE_SPLIT_SCRIPT_NAME = resolve7(import.meta.dirname, "cache-unzip-src-unzip.js");
 
 // ../../src/cache-unzip/src/index.ts
 var isDeno = globalThis.Deno != void 0;
@@ -30629,8 +30464,8 @@ var Version = class _Version {
     }
     const parsed = re2.full.exec(version2);
     if (!parsed) {
-      const main3 = re2.main.exec(version2);
-      if (!main3) {
+      const main2 = re2.main.exec(version2);
+      if (!main2) {
         throw invalidVersion(
           version2,
           "no Major.minor.patch tuple present"
@@ -31604,13 +31439,31 @@ var getOptions = (options) => ({
     ...options["git-host-archives"]
   } : defaultGitHostArchives
 });
+var protocolRE = /^([a-zA-Z][a-zA-Z0-9+-]+):/;
+var builtinProtocols = /* @__PURE__ */ new Set([
+  "catalog",
+  "workspace",
+  "registry",
+  "file",
+  "http",
+  "https",
+  "git",
+  "git+ssh",
+  "git+http",
+  "git+https",
+  "git+file"
+]);
+var unknownProtocol = (str, options) => {
+  const p = protocolRE.exec(str)?.[1];
+  return p === void 0 || builtinProtocols.has(p) || p === options["default-registry-alias"] || options.registries[p] !== void 0 || options["git-hosts"][p] !== void 0 || options["jsr-registries"][p] !== void 0 ? void 0 : p;
+};
 var startsWithSpecIdentifier = (spec, options) => spec.startsWith("/") || spec.startsWith("./") || spec.startsWith("../") || spec.startsWith("file:") || spec.startsWith("http:") || spec.startsWith("https:") || spec.startsWith("workspace:") || spec.startsWith("catalog:") || spec.startsWith("git@") || spec.startsWith("git://") || spec.startsWith("git+ssh://") || spec.startsWith("git+http://") || spec.startsWith("git+https://") || spec.startsWith("git+file://") || spec.startsWith("git@github.com") || spec.startsWith("registry:") || spec.startsWith("npm:") || spec.startsWith("jsr:") || spec.startsWith("gh:") || // anything that starts with a known git host key, or a
 // custom registered registry protocol e.g: `github:`, `custom:`
 [
   ...Object.keys(options["git-hosts"]),
   ...Object.keys(options.registries),
   ...Object.keys(options["jsr-registries"])
-].some((key) => spec.startsWith(`${key}:`));
+].some((key) => spec.startsWith(`${key}:`)) || unknownProtocol(spec, options) !== void 0;
 var findFirstAt = (spec, hasScope) => spec.indexOf("@", hasScope ? 1 : 0);
 var findGitIdentifier = (spec) => spec.indexOf("#") > 2;
 var findFileIdentifier = (spec) => spec.includes("/");
@@ -31719,6 +31572,7 @@ var Spec = class _Spec {
       assertPathSafeName(this.name, this.spec);
     } else {
       this.spec = spec;
+      this.#assertKnownProtocol(spec);
       if (!spec.startsWith("git@") && startsWithSpecIdentifier(spec, this.options) && spec.includes(":") && [
         ...Object.keys(this.options.registries),
         ...Object.keys(defaultRegistries)
@@ -31904,6 +31758,7 @@ var Spec = class _Spec {
       this.spec = `${this.name}@${this.bareSpec}`;
       return;
     }
+    this.#assertKnownProtocol(this.bareSpec);
     if (!this.bareSpec.startsWith("./") && !this.bareSpec.startsWith("../") && this.options["git-hosts"].github) {
       const hash2 = this.bareSpec.indexOf("#");
       const up = hash2 === -1 ? this.bareSpec : this.bareSpec.substring(0, hash2);
@@ -32051,6 +31906,22 @@ var Spec = class _Spec {
     this.spec = this.name + "@" + this.bareSpec;
     return this.subspec;
   }
+  #assertKnownProtocol(str) {
+    const proto = unknownProtocol(str, this.options);
+    if (proto === void 0) return;
+    throw this.#error(`Protocol ${proto}: is not defined`, {
+      found: `${proto}:`,
+      validOptions: [
+        .../* @__PURE__ */ new Set([
+          ...builtinProtocols,
+          this.options["default-registry-alias"],
+          ...Object.keys(this.options.registries),
+          ...Object.keys(this.options["git-hosts"]),
+          ...Object.keys(this.options["jsr-registries"])
+        ])
+      ].map((p) => `${p}:`)
+    });
+  }
   #error(message, extra = {}) {
     return error(message, { spec: this.spec, ...extra }, this.#error);
   }
@@ -32270,7 +32141,7 @@ var SpawnPromise = class extends Promise {
         Object.assign(errorResult, extra);
         rej(error("command failed", errorResult));
       };
-      const resolve10 = (status, signal) => {
+      const resolve11 = (status, signal) => {
         const stdio = stdioResult(stdout, stderr, opts);
         const successResult = {
           command,
@@ -32291,7 +32162,7 @@ var SpawnPromise = class extends Promise {
         if ((status || signal) && !opts.acceptFail) {
           reject(void 0, status, signal);
         } else {
-          resolve10(status, signal);
+          resolve11(status, signal);
         }
       });
     });
@@ -32477,9 +32348,9 @@ var urlOpen = async (url, { signal } = {}) => {
 
 // ../../src/xdg/src/index.ts
 import { homedir, tmpdir as tmpdir2 } from "node:os";
-import { resolve as resolve7 } from "node:path";
+import { resolve as resolve8 } from "node:path";
 var root = homedir();
-var path = (p) => resolve7(root, p);
+var path = (p) => resolve8(root, p);
 var defaults = process.platform === "darwin" ? (which2) => {
   switch (which2) {
     case "config":
@@ -32491,7 +32362,7 @@ var defaults = process.platform === "darwin" ? (which2) => {
     case "state":
       return path("Library/State");
     case "runtime":
-      return resolve7(
+      return resolve8(
         tmpdir2(),
         /* c8 ignore next */
         String(process.getuid?.() ?? ""),
@@ -32503,15 +32374,15 @@ var defaults = process.platform === "darwin" ? (which2) => {
   const lad = process.env.LOCALAPPDATA ?? path("AppData/Local");
   switch (which2) {
     case "config":
-      return resolve7(ad, "xdg.config");
+      return resolve8(ad, "xdg.config");
     case "cache":
-      return resolve7(lad, "xdg.cache");
+      return resolve8(lad, "xdg.cache");
     case "data":
-      return resolve7(ad, "xdg.data");
+      return resolve8(ad, "xdg.data");
     case "state":
-      return resolve7(lad, "xdg.state");
+      return resolve8(lad, "xdg.state");
     case "runtime":
-      return resolve7(tmpdir2(), "xdg.run");
+      return resolve8(tmpdir2(), "xdg.run");
   }
 } : (which2) => {
   switch (which2) {
@@ -32524,7 +32395,7 @@ var defaults = process.platform === "darwin" ? (which2) => {
     case "state":
       return path(".local/state");
     case "runtime":
-      return resolve7(
+      return resolve8(
         tmpdir2(),
         /* c8 ignore next */
         String(process.getuid?.() ?? ""),
@@ -32552,31 +32423,31 @@ var XDG = class {
     this.name = name;
   }
   config(p = "") {
-    return resolve7(this.base.config, this.name, p);
+    return resolve8(this.base.config, this.name, p);
   }
   cache(p = "") {
-    return resolve7(this.base.cache, this.name, p);
+    return resolve8(this.base.cache, this.name, p);
   }
   data(p = "") {
-    return resolve7(this.base.data, this.name, p);
+    return resolve8(this.base.data, this.name, p);
   }
   state(p = "") {
-    return resolve7(this.base.state, this.name, p);
+    return resolve8(this.base.state, this.name, p);
   }
   runtime(p = "") {
-    return resolve7(this.base.runtime, this.name, p);
+    return resolve8(this.base.runtime, this.name, p);
   }
 };
 
 // ../../src/registry-client/src/index.ts
 import { randomUUID } from "node:crypto";
 import { availableParallelism } from "node:os";
-import { dirname as dirname4, resolve as resolve9 } from "node:path";
+import { dirname as dirname4, resolve as resolve10 } from "node:path";
 import { setTimeout as setTimeout3 } from "node:timers/promises";
 
 // ../../node_modules/.vlt/~npm~package-json-from-dist@1.0.1/node_modules/package-json-from-dist/dist/esm/index.js
 import { readFileSync as readFileSync2 } from "node:fs";
-import { dirname as dirname2, resolve as resolve8, sep as sep2 } from "node:path";
+import { dirname as dirname2, resolve as resolve9, sep as sep2 } from "node:path";
 import { fileURLToPath } from "node:url";
 var NM = `${sep2}node_modules${sep2}`;
 var STORE = `.store${sep2}`;
@@ -32592,17 +32463,17 @@ var findPackageJson = (from, pathFromSrc = "../package.json") => {
     if (pkgDir.startsWith(STORE)) {
       const pkg = pkgDir.indexOf(PKG, STORE.length);
       if (pkg) {
-        return resolve8(nm, pkgDir.substring(0, pkg + PKG.length), "package.json");
+        return resolve9(nm, pkgDir.substring(0, pkg + PKG.length), "package.json");
       }
     }
     const pkgName = pkgDir.startsWith("@") ? pkgDir.split(sep2, 2).join(sep2) : String(pkgDir.split(sep2)[0]);
-    return resolve8(nm, pkgName, "package.json");
+    return resolve9(nm, pkgName, "package.json");
   } else {
     const d4 = __dirname.lastIndexOf(DIST);
     if (d4 !== -1) {
-      return resolve8(__dirname.substring(0, d4), "package.json");
+      return resolve9(__dirname.substring(0, d4), "package.json");
     } else {
-      return resolve8(__dirname, pathFromSrc);
+      return resolve9(__dirname, pathFromSrc);
     }
   }
 };
@@ -32826,7 +32697,7 @@ var getTokenByURL = async (requestUrl, identity) => {
 var import_cache_control_parser = __toESM(require_dist(), 1);
 import { createHash as createHash2 } from "node:crypto";
 import { inspect as inspect2 } from "node:util";
-import { gunzipSync as gunzipSync2 } from "node:zlib";
+import { gunzipSync } from "node:zlib";
 
 // ../../src/registry-client/src/string-encoding.ts
 var decoder = new TextDecoder();
@@ -32872,13 +32743,13 @@ var setRawHeader = (headers, key, value) => {
 };
 
 // ../../src/registry-client/src/cache-entry.ts
-var MAX_DECOMPRESSION_RATIO2 = 1e3;
-var defaultMaxUnpackedBytes2 = 2 * 1024 * 1024 * 1024;
-var parseMaxUnpackedBytes2 = (raw) => {
+var MAX_DECOMPRESSION_RATIO = 1e3;
+var defaultMaxUnpackedBytes = 2 * 1024 * 1024 * 1024;
+var parseMaxUnpackedBytes = (raw) => {
   const n7 = Number(raw);
-  return Number.isFinite(n7) && n7 >= 1 ? Math.floor(n7) : defaultMaxUnpackedBytes2;
+  return Number.isFinite(n7) && n7 >= 1 ? Math.floor(n7) : defaultMaxUnpackedBytes;
 };
-var maxUnpackedBytes2 = parseMaxUnpackedBytes2(
+var maxUnpackedBytes = parseMaxUnpackedBytes(
   process.env.VLT_TAR_MAX_UNPACKED_BYTES
 );
 var readSize = (buf, offset) => {
@@ -32915,6 +32786,7 @@ var CacheEntry = class _CacheEntry {
   #trustIntegrity;
   #staleWhileRevalidateFactor;
   #fromCache = false;
+  #headSize;
   constructor(statusCode, headers, {
     body,
     integrity,
@@ -33057,6 +32929,13 @@ var CacheEntry = class _CacheEntry {
   get fromCache() {
     return this.#fromCache;
   }
+  /**
+   * Byte length of the encoded head (4-byte length prefix + status +
+   * headers). Set when decoded from cache or after `encodeHead()`.
+   */
+  get headSize() {
+    return this.#headSize;
+  }
   get statusCode() {
     return this.#statusCode;
   }
@@ -33199,12 +33078,12 @@ var CacheEntry = class _CacheEntry {
       if (this._body.length === 0)
         throw error("Invalid buffer, cant unzip");
       const max = Math.min(
-        maxUnpackedBytes2,
-        this._body.length * MAX_DECOMPRESSION_RATIO2
+        maxUnpackedBytes,
+        this._body.length * MAX_DECOMPRESSION_RATIO
       );
       let b;
       try {
-        b = gunzipSync2(this._body, { maxOutputLength: max });
+        b = gunzipSync(this._body, { maxOutputLength: max });
       } catch (er) {
         throw er.code === "ERR_BUFFER_TOO_LARGE" ? error("cache entry exceeds maximum unpacked size", {
           found: this._body.length,
@@ -33241,19 +33120,10 @@ var CacheEntry = class _CacheEntry {
     this.#json = obj;
     return obj;
   }
-  /**
-   * Pass the contents of a @vltpkg/cache.Cache object as a buffer,
-   * and this static method will decode it into a CacheEntry representing
-   * the cached response.
-   */
-  static decode(buffer) {
-    if (buffer.length < 4) {
-      return emptyCacheEntry;
-    }
+  static #parseHead(buffer) {
+    if (buffer.length < 4) return void 0;
     const headSize = readSize(buffer, 0);
-    if (buffer.length < headSize) {
-      return emptyCacheEntry;
-    }
+    if (buffer.length < headSize) return void 0;
     const statusCode = Number(getDecodedValue(buffer.subarray(4, 7)));
     const headersBuffer = buffer.subarray(7, headSize);
     const headers = [];
@@ -33272,22 +33142,51 @@ var CacheEntry = class _CacheEntry {
       headers.push(val);
       i2 += size;
     }
-    const body = buffer.subarray(headSize);
+    return { statusCode, headers, integrity, headSize };
+  }
+  /**
+   * Decode only the status/headers from an encoded cache buffer.
+   * The body is not read; `headSize` records how many bytes the head
+   * occupies so a later `encodeHead()` can be patched in place.
+   */
+  static decodeHead(buffer) {
+    const parsed = _CacheEntry.#parseHead(buffer);
+    if (!parsed) return emptyCacheEntry;
+    const c = new _CacheEntry(parsed.statusCode, parsed.headers, {
+      body: new Uint8Array(0),
+      integrity: parsed.integrity,
+      trustIntegrity: true
+    });
+    c.#fromCache = true;
+    c.#headSize = parsed.headSize;
+    return c;
+  }
+  /**
+   * Pass the contents of a @vltpkg/cache.Cache object as a buffer,
+   * and this static method will decode it into a CacheEntry representing
+   * the cached response.
+   */
+  static decode(buffer, options = {}) {
+    const parsed = _CacheEntry.#parseHead(buffer);
+    if (!parsed) return emptyCacheEntry;
+    const body = buffer.subarray(parsed.headSize);
     const c = new _CacheEntry(
-      statusCode,
+      parsed.statusCode,
       setRawHeader(
-        headers,
+        parsed.headers,
         "content-length",
         String(body.byteLength)
       ),
       {
         body,
-        integrity,
+        integrity: parsed.integrity,
         trustIntegrity: true,
-        contentLength: body.byteLength
+        contentLength: body.byteLength,
+        ...options
       }
     );
     c.#fromCache = true;
+    c.#headSize = parsed.headSize;
     try {
       if (c.isJSON) {
         c.unzip();
@@ -33305,42 +33204,49 @@ var CacheEntry = class _CacheEntry {
     return gzipBytes[0] === 31 && gzipBytes[1] === 139;
   }
   /**
-   * Encode the entry as a single Buffer for writing to the cache
+   * Encode status + headers (no body) as they appear at the start of
+   * an on-disk cache file.
    */
-  encode() {
-    if (this.isJSON) this.json();
+  encodeHead() {
     const statusStr = String(this.#statusCode);
     const statusBytes = getEncondedValue(statusStr);
     let headLength = 4 + statusBytes.byteLength;
     for (const h of this.#headers) headLength += 4 + h.byteLength;
-    const headLenBytes = new Uint8Array(4);
-    headLenBytes[0] = headLength >> 24 & 255;
-    headLenBytes[1] = headLength >> 16 & 255;
-    headLenBytes[2] = headLength >> 8 & 255;
-    headLenBytes[3] = headLength & 255;
-    const headerChunks = [];
-    for (const h of this.#headers) {
-      const l = headLenBytes.byteLength + h.byteLength;
-      const lb = new Uint8Array(4);
-      lb[0] = l >> 24 & 255;
-      lb[1] = l >> 16 & 255;
-      lb[2] = l >> 8 & 255;
-      lb[3] = l & 255;
-      headerChunks.push(lb, h);
-    }
-    const total = headLenBytes.byteLength + statusBytes.byteLength + headerChunks.reduce((n7, b) => n7 + b.byteLength, 0) + this._body.byteLength;
-    const outBuffer = new ArrayBuffer(total);
-    const out = Buffer.from(outBuffer, 0, total);
+    const out = Buffer.from(
+      new ArrayBuffer(headLength),
+      0,
+      headLength
+    );
     let off = 0;
-    out.set(headLenBytes, off);
-    off += headLenBytes.byteLength;
+    out[off++] = headLength >> 24 & 255;
+    out[off++] = headLength >> 16 & 255;
+    out[off++] = headLength >> 8 & 255;
+    out[off++] = headLength & 255;
     out.set(statusBytes, off);
     off += statusBytes.byteLength;
-    for (const chunk of headerChunks) {
-      out.set(chunk, off);
-      off += chunk.byteLength;
-    }
-    out.set(this._body, off);
+    for (const h of this.#headers) {
+      const l = 4 + h.byteLength;
+      out[off++] = l >> 24 & 255;
+      out[off++] = l >> 16 & 255;
+      out[off++] = l >> 8 & 255;
+      out[off++] = l & 255;
+      out.set(h, off);
+      off += h.byteLength;
+    }
+    this.#headSize = headLength;
+    return out;
+  }
+  /**
+   * Encode the entry as a single Buffer for writing to the cache
+   */
+  encode() {
+    if (this.isJSON) this.json();
+    const head = this.encodeHead();
+    const body = this._body;
+    const total = head.byteLength + body.byteLength;
+    const out = Buffer.from(new ArrayBuffer(total), 0, total);
+    out.set(head, 0);
+    out.set(body, head.byteLength);
     return out;
   }
 };
@@ -33392,7 +33298,7 @@ var register2 = (path2, method, url) => {
 var handleBeforeExit2 = () => {
   const compileCacheDir = module2.getCompileCacheDir();
   for (const [path2, r] of registered2) {
-    if (!r.size) return;
+    if (!r.size) continue;
     const env = { ...process.env };
     if (compileCacheDir) env.NODE_COMPILE_CACHE ??= compileCacheDir;
     const args = [];
@@ -33451,7 +33357,7 @@ var getWebAuthChallenge = (o) => {
 
 // ../../src/registry-client/src/otplease.ts
 import { createInterface } from "node:readline/promises";
-import { gunzipSync as gunzipSync3 } from "node:zlib";
+import { gunzipSync as gunzipSync2 } from "node:zlib";
 var log2 = (msg) => console.error(msg);
 var question = async (text) => {
   const rl = createInterface({
@@ -33468,7 +33374,7 @@ var responseBodyText = async (response) => {
     response.headers["content-encoding"] ?? ""
   );
   if (/\bgzip\b/i.test(contentEncoding)) {
-    return gunzipSync3(await response.body.arrayBuffer()).toString();
+    return gunzipSync2(await response.body.arrayBuffer()).toString();
   }
   return await response.body.text();
 };
@@ -33609,11 +33515,38 @@ var setCacheHeaders = (options, entry) => {
 // ../../src/registry-client/src/token-response.ts
 var getTokenResponse = (b) => !!b && typeof b === "object" && "token" in b && typeof b.token === "string" && b.token ? { token: b.token } : void 0;
 
+// ../../src/registry-client/src/response.ts
+var collectHeaders = (response) => {
+  const h = [];
+  for (const [key, value] of Object.entries(response.headers)) {
+    if (Array.isArray(value)) {
+      h.push(
+        getEncondedValue(key),
+        getEncondedValue(value.join(", "))
+      );
+    } else if (typeof value === "string") {
+      h.push(getEncondedValue(key), getEncondedValue(value));
+    }
+  }
+  return h;
+};
+var readBody = async (response, entry) => {
+  response.body.on(
+    "data",
+    (chunk) => entry.addBody(chunk)
+  );
+  return await new Promise((res, rej) => {
+    response.body.on("error", rej);
+    response.body.on("end", () => res(entry));
+  });
+};
+
 // ../../src/registry-client/src/oidc.ts
 var import_undici2 = __toESM(require_undici(), 1);
 
 // ../../src/registry-client/src/index.ts
 var isCacheableMethod = (m2) => m2 === "GET" || m2 === "HEAD";
+var cacheKey = (method, url) => `${method !== "GET" ? method + " " : ""}${url}`;
 var { version } = loadPackageJson(
   import.meta.filename,
   "registry-client-package.json"
@@ -33664,7 +33597,7 @@ var RegistryClient = class {
     } = options;
     this.identity = identity;
     this.staleWhileRevalidateFactor = staleWhileRevalidateFactor;
-    const path2 = resolve9(cache, "registry-client");
+    const path2 = resolve10(cache, "registry-client");
     this.cache = new Cache({
       path: path2,
       maxSize: parseCacheMaxSize(process.env.VLT_CACHE_MAX_SIZE),
@@ -33784,7 +33717,9 @@ var RegistryClient = class {
   #decodeCached(buffer) {
     const hit = this.#decoded.get(buffer);
     if (hit) return hit;
-    const entry = CacheEntry.decode(buffer);
+    const entry = CacheEntry.decode(buffer, {
+      "stale-while-revalidate-factor": this.staleWhileRevalidateFactor
+    });
     if (!entry.statusCode) return void 0;
     if (entry.isJSON) {
       try {
@@ -33832,7 +33767,7 @@ var RegistryClient = class {
     const m2 = isCacheableMethod(method) ? method : void 0;
     const { useCache = !!m2 } = options;
     signal?.throwIfAborted();
-    const key = `${method !== "GET" ? method + " " : ""}${u2}`;
+    const key = cacheKey(method, u2);
     const buffer = useCache ? await this.cache.fetch(key, { context: { integrity } }) : void 0;
     const entry = buffer ? this.#decodeCached(buffer) : void 0;
     if (entry?.valid) {
@@ -33941,17 +33876,7 @@ var RegistryClient = class {
         consumedBody = otpResult.bodyConsumed;
       }
     }
-    const h = [];
-    for (const [key, value] of Object.entries(response.headers)) {
-      if (Array.isArray(value)) {
-        h.push(
-          getEncondedValue(key),
-          getEncondedValue(value.join(", "))
-        );
-      } else if (typeof value === "string") {
-        h.push(getEncondedValue(key), getEncondedValue(value));
-      }
-    }
+    const h = collectHeaders(response);
     const { integrity, trustIntegrity } = options;
     const contentLength = consumedBody !== void 0 ? consumedBody.length : response.headers["content-length"] ? Number(response.headers["content-length"]) : (
       /* c8 ignore next */
@@ -33982,21 +33907,148 @@ var RegistryClient = class {
       }
       return result;
     }
-    response.body.on(
-      "data",
-      (chunk) => result.addBody(chunk)
-    );
-    return await new Promise((res, rej) => {
-      response.body.on("error", rej);
-      response.body.on("end", () => res(result));
-    });
+    return await readBody(response, result);
+  }
+};
+
+// ../../src/registry-client/src/revalidate-entry.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { open, readFile as readFile3 } from "node:fs/promises";
+var patchDateFallback = async (rc, file, key, head) => {
+  const date = head.getHeaderString("date");
+  if (!date) return;
+  const full = await readFile3(file);
+  const fullEntry = CacheEntry.decode(full);
+  if (!fullEntry.statusCode) return;
+  fullEntry.setHeader("date", date);
+  const buf = fullEntry.encode();
+  rc.cache.set(
+    key,
+    Buffer.from(buf.buffer, buf.byteOffset, buf.byteLength),
+    { integrity: fullEntry.integrity }
+  );
+};
+var readHead = async (fh) => {
+  const sizeBuf = Buffer.alloc(4);
+  const { bytesRead } = await fh.read(sizeBuf, 0, 4, 0);
+  if (bytesRead < 4) return;
+  const headSize = sizeBuf.readUInt32BE(0);
+  if (headSize < 7) return;
+  const headBuf = Buffer.alloc(headSize);
+  sizeBuf.copy(headBuf, 0, 0, 4);
+  const { bytesRead: n7 } = await fh.read(headBuf, 4, headSize - 4, 4);
+  if (n7 < headSize - 4) return;
+  const entry = CacheEntry.decodeHead(headBuf);
+  return entry.statusCode ? entry : void 0;
+};
+var revalidateEntry = async (rc, method, url) => {
+  try {
+    const u2 = typeof url === "string" ? new URL(url) : url;
+    const key = cacheKey(method, u2);
+    const file = rc.cache.path(key);
+    let fh;
+    try {
+      fh = await open(file, "r+");
+      const entry = await readHead(fh);
+      if (!entry) return;
+      const origHeadSize = entry.headSize;
+      const options = {
+        method,
+        origin: u2.origin
+      };
+      options.path = u2.pathname.replace(/\/+$/, "") + u2.search;
+      options.headers = addHeader(
+        addHeader(
+          addHeader(
+            options.headers,
+            "accept-encoding",
+            "gzip;q=1.0, identity;q=0.5"
+          ),
+          "user-agent",
+          userAgent
+        ),
+        "npm-session",
+        randomUUID2()
+      );
+      setCacheHeaders(options, entry);
+      options.headers = addHeader(
+        options.headers,
+        "authorization",
+        await getTokenByURL(String(u2), rc.identity)
+      );
+      const response = await rc.agent.request(
+        options
+      );
+      if (handleCacheHitResponse(response, entry)) {
+        const newHead = entry.encodeHead();
+        if (newHead.byteLength === origHeadSize) {
+          await fh.write(newHead, 0, newHead.byteLength, 0);
+          return;
+        }
+        await fh.close();
+        fh = void 0;
+        await patchDateFallback(rc, file, key, entry);
+        return;
+      }
+      if (response.statusCode === 200 && method === "GET") {
+        const result = new CacheEntry(
+          response.statusCode,
+          collectHeaders(response),
+          {
+            "stale-while-revalidate-factor": rc.staleWhileRevalidateFactor,
+            contentLength: response.headers["content-length"] ? Number(response.headers["content-length"]) : void 0
+          }
+        );
+        await readBody(response, result);
+        result.unzip();
+        const buf = result.encode();
+        rc.cache.set(
+          key,
+          Buffer.from(buf.buffer, buf.byteOffset, buf.byteLength),
+          { integrity: result.integrity }
+        );
+        return;
+      }
+      const status = response.statusCode;
+      if (status === 301 || status === 302 || status === 303 || status === 307 || status === 308) {
+        response.body.resume();
+        await fh.close();
+        fh = void 0;
+        await rc.request(u2, { method, staleWhileRevalidate: false });
+        return;
+      }
+      response.body.resume();
+    } finally {
+      await fh?.close();
+    }
+  } catch {
   }
 };
 
 // ../../src/registry-client/src/revalidate.ts
 var __CODE_SPLIT_SCRIPT_NAME2 = import.meta.filename;
-var isMain2 = (path2) => path2 === __CODE_SPLIT_SCRIPT_NAME2 || path2 === pathToFileURL2(__CODE_SPLIT_SCRIPT_NAME2).toString();
-var main2 = async (cache, input = process.stdin) => {
+var isMain = (path2) => path2 === __CODE_SPLIT_SCRIPT_NAME2 || path2 === pathToFileURL(__CODE_SPLIT_SCRIPT_NAME2).toString();
+var defaultConcurrency = 6;
+var revalidateConcurrency = (raw) => {
+  const n7 = Number(raw);
+  return Number.isFinite(n7) && n7 >= 1 ? Math.min(32, Math.floor(n7)) : defaultConcurrency;
+};
+var runPool = async (reqs, concurrency, fn) => {
+  let next = 0;
+  const n7 = Math.min(concurrency, reqs.length);
+  await Promise.all(
+    Array.from({ length: n7 }, async () => {
+      for (; ; ) {
+        const i2 = next++;
+        if (i2 >= reqs.length) return;
+        const req = reqs[i2];
+        if (req === void 0) return;
+        await fn(req[0], req[1]);
+      }
+    })
+  );
+};
+var main = async (cache, input = process.stdin) => {
   if (!cache) {
     return false;
   }
@@ -34023,27 +34075,28 @@ var main2 = async (cache, input = process.stdin) => {
     return false;
   }
   const rc = new RegistryClient({ cache });
-  await Promise.all(
-    reqs.map(async ([method, url]) => {
-      await rc.request(url, {
-        method,
-        staleWhileRevalidate: false
-      });
-    })
+  await runPool(
+    reqs,
+    revalidateConcurrency(process.env.VLT_REVALIDATE_CONCURRENCY),
+    (method, url) => revalidateEntry(rc, method, url)
   );
   return true;
 };
-if (isMain2(process.argv[1])) {
+if (isMain(process.argv[1])) {
   process.title = "vlt-cache-revalidate";
+  try {
+    setPriority(19);
+  } catch {
+  }
   const cacheFolder = process.argv.length === 2 ? void 0 : process.argv.at(-1);
-  const res = await main2(cacheFolder, process.stdin);
+  const res = await main(cacheFolder, process.stdin);
   if (!res) {
     process.exit(1);
   }
 }
 export {
   __CODE_SPLIT_SCRIPT_NAME2 as __CODE_SPLIT_SCRIPT_NAME,
-  main2 as main
+  main
 };
 /*! Bundled license information: