@vltpkg/cli-js 1.0.7 → 1.0.9

package/{access-OKO4MXDT.js → access-5DJJIIGD.js}

@@ -19,15 +19,15 @@ import "./chunk-XKVU23NC.js";
 import "./chunk-XISRK3R5.js";
 import {
   RegistryClient
-} from "./chunk-JWWDJYSU.js";
+} from "./chunk-ATYE2HQV.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{bugs-J56QQ3CP.js → bugs-NRHU4ENC.js}

@@ -12,22 +12,31 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   require_lib
 } from "./chunk-CLVRCGOZ.js";
+import {
+  openUrl
+} from "./chunk-2HDWM6AD.js";
 import {
   createHostContextsMap
-} from "./chunk-CHHGSDAP.js";
+} from "./chunk-6NQBG3ZR.js";
 import {
   PackageInfoClient
-} from "./chunk-A4EKZ32F.js";
+} from "./chunk-HRY5MJCA.js";
 import "./chunk-ZWKI5OSF.js";
+import "./chunk-MXCWH7WC.js";
+import "./chunk-YAIKXFLN.js";
+import "./chunk-G2YT2GWF.js";
+import "./chunk-GDJ7JT2R.js";
+import "./chunk-5JFRXIK2.js";
+import "./chunk-WGDTG44V.js";
 import {
   Query,
   actual
-} from "./chunk-3NGV7EC6.js";
+} from "./chunk-LHMEJF6J.js";
 import {
   SecurityArchive
-} from "./chunk-ED2DDTQT.js";
-import "./chunk-SVBEF5PK.js";
-import "./chunk-3OPNZI6G.js";
+} from "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
+import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
 } from "./chunk-PTR5IGFQ.js";
@@ -35,17 +44,16 @@ import {
   Spec
 } from "./chunk-XKVU23NC.js";
 import "./chunk-XISRK3R5.js";
+import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
-import {
-  urlOpen
-} from "./chunk-HAYXR3MW.js";
+import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -174,7 +182,7 @@ var command = async (conf) => {
       if (!result) {
         throw error("Unexpected empty result");
       }
-      await urlOpen(result.url);
+      await openUrl(result.url);
       return result;
     }
     return results;
@@ -191,7 +199,7 @@ var command = async (conf) => {
   if (!name) {
     throw error("No package name found");
   }
-  await urlOpen(url);
+  await openUrl(url);
   return { url, name };
 };
 export {

package/{build-CQ2E2XRO.js → build-5VZJTEBD.js}

@@ -11,10 +11,10 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-3NGV7EC6.js";
-import "./chunk-ED2DDTQT.js";
-import "./chunk-SVBEF5PK.js";
-import "./chunk-3OPNZI6G.js";
+} from "./chunk-LHMEJF6J.js";
+import "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
+import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
 } from "./chunk-PTR5IGFQ.js";
@@ -24,12 +24,12 @@ import "./chunk-HTOTG4TS.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
-import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
-import "./chunk-VE6CCH33.js";
 import {
   isErrorWithCause
 } from "./chunk-VFBCWAOC.js";
+import "./chunk-XNLSTHDK.js";
+import "./chunk-BHJT53TP.js";
+import "./chunk-VE6CCH33.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{cache-PPEXAQT7.js → cache-QZ5XII4U.js}

@@ -15,13 +15,13 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-OUF2P2OD.js";
+} from "./chunk-MXCWH7WC.js";
 import "./chunk-YAIKXFLN.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import "./chunk-5JFRXIK2.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-3OPNZI6G.js";
+import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
 } from "./chunk-PTR5IGFQ.js";
@@ -34,15 +34,15 @@ import {
 } from "./chunk-4KCU2KZL.js";
 import {
   CacheEntry
-} from "./chunk-JWWDJYSU.js";
+} from "./chunk-ATYE2HQV.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/chunk-2HDWM6AD.js

@@ -0,0 +1,30 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+import {
+  stderr
+} from "./chunk-MXCWH7WC.js";
+import {
+  urlOpen
+} from "./chunk-HAYXR3MW.js";
+
+// ../../src/cli-sdk/src/open-url.ts
+var openUrl = async (url) => {
+  try {
+    await urlOpen(url);
+  } catch {
+    stderr(`Could not open a browser. Please open ${url} manually.`);
+  }
+};
+
+export {
+  openUrl
+};

package/{chunk-ED2DDTQT.js → chunk-2YJ5MESP.js}

@@ -13,19 +13,19 @@ import {
   asDepID,
   baseDepID,
   splitDepID
-} from "./chunk-3OPNZI6G.js";
+} from "./chunk-YOE3VZFX.js";
 import {
   loadPackageJson
 } from "./chunk-E74WGW5C.js";
 import {
   I
 } from "./chunk-LPIBYUMT.js";
-import {
-  XDG
-} from "./chunk-XNLSTHDK.js";
 import {
   defaultRegistryName
 } from "./chunk-VFBCWAOC.js";
+import {
+  XDG
+} from "./chunk-XNLSTHDK.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -250,9 +250,7 @@ var asPackageReportData = (o) => {
 import { resolve } from "node:path";
 var __CODE_SPLIT_SCRIPT_NAME = resolve(import.meta.dirname, "security-archive-src-update-expired.js");
 
-// ../../src/security-archive/src/index.ts
-var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
-var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
+// ../../src/security-archive/src/browser.ts
 var npmRegistryURL = "https://registry.npmjs.org/";
 var normalizeRegistryURL = (url) => url.endsWith("/") ? url : `${url}/`;
 var nodeRegistryURL = (node) => {
@@ -268,6 +266,10 @@ var usesNpmRegistry = (node) => {
   const npmAlias = node.options.registries?.[defaultRegistryName];
   return !!npmAlias && normalizeRegistryURL(npmAlias) === origin;
 };
+
+// ../../src/security-archive/src/index.ts
+var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
+var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
 var { version } = loadPackageJson(
   import.meta.filename,
   "cli-package.json"
@@ -313,6 +315,31 @@ var SecurityArchive = class _SecurityArchive extends I {
     this.#path = options.path ?? new XDG("vlt").cache("security-archive.db");
     this.#retries = options.retries ?? 3;
   }
+  /**
+   * Get the report data for a node, keyed by its base {@link DepID}.
+   */
+  get(k, options) {
+    return super.get(baseDepID(k), options);
+  }
+  /**
+   * Check for report data, keyed by the base {@link DepID}.
+   */
+  has(k) {
+    return super.has(baseDepID(k));
+  }
+  /**
+   * Store report data for a node, keyed by its base {@link DepID} so
+   * peer-suffixed copies of the same package share one entry.
+   */
+  set(k, v, setOptions) {
+    return super.set(baseDepID(k), v, setOptions);
+  }
+  /**
+   * Delete the report data stored under the base {@link DepID}.
+   */
+  delete(k) {
+    return super.delete(baseDepID(k));
+  }
   /**
    * Retrieves a node using its name and version.
    */

package/{chunk-CHHGSDAP.js → chunk-6NQBG3ZR.js}

@@ -13,10 +13,10 @@ import {
   actual,
   callLimit,
   createVirtualRoot
-} from "./chunk-3NGV7EC6.js";
+} from "./chunk-LHMEJF6J.js";
 import {
   SecurityArchive
-} from "./chunk-ED2DDTQT.js";
+} from "./chunk-2YJ5MESP.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -115,7 +115,7 @@ var reloadConfig = async (folder) => {
     unload("project");
   } catch {
   }
-  const { Config } = await import("./config-XY5CDGTD.js");
+  const { Config } = await import("./config-RQKPUW5B.js");
   return Config.load(folder, process.argv, true);
 };
 

package/{chunk-SVO3HI2G.js → chunk-6WMR7BLF.js}

@@ -11,26 +11,26 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-A4EKZ32F.js";
+} from "./chunk-HRY5MJCA.js";
 import {
   findCmdShimIfExists,
   install
-} from "./chunk-3NGV7EC6.js";
+} from "./chunk-LHMEJF6J.js";
 import {
   PathScurry
-} from "./chunk-SVBEF5PK.js";
+} from "./chunk-USTJECVS.js";
 import {
   Spec
 } from "./chunk-XKVU23NC.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
-import {
-  XDG
-} from "./chunk-XNLSTHDK.js";
 import {
   parseScope
 } from "./chunk-VFBCWAOC.js";
+import {
+  XDG
+} from "./chunk-XNLSTHDK.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-JLKFIX2H.js → chunk-A6TBJ4AB.js}

@@ -14,12 +14,12 @@ import {
 } from "./chunk-RIYFGX27.js";
 import {
   createHostContextsMap
-} from "./chunk-CHHGSDAP.js";
+} from "./chunk-6NQBG3ZR.js";
 import {
   stderr,
   stdout,
   styleTextStdout
-} from "./chunk-OUF2P2OD.js";
+} from "./chunk-MXCWH7WC.js";
 import {
   require_emoji_regex
 } from "./chunk-VTEFO2FT.js";
@@ -27,10 +27,10 @@ import {
   Query,
   actual,
   isRunResult
-} from "./chunk-3NGV7EC6.js";
+} from "./chunk-LHMEJF6J.js";
 import {
   Monorepo
-} from "./chunk-SVBEF5PK.js";
+} from "./chunk-USTJECVS.js";
 import {
   isErrorWithCause
 } from "./chunk-VFBCWAOC.js";

package/{chunk-JWWDJYSU.js → chunk-ATYE2HQV.js}

@@ -21,15 +21,15 @@ import {
 import {
   logRequest
 } from "./chunk-UBLFPJHV.js";
+import {
+  asError
+} from "./chunk-VFBCWAOC.js";
 import {
   XDG
 } from "./chunk-XNLSTHDK.js";
 import {
   rimraf
-} from "./chunk-BJBFEQRR.js";
-import {
-  asError
-} from "./chunk-VFBCWAOC.js";
+} from "./chunk-BHJT53TP.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -12597,7 +12597,7 @@ var require_mock_utils = __commonJS({
       kTotalDispatchCount
     } = require_mock_symbols();
     var { serializePathWithQuery } = require_util();
-    var { STATUS_CODES } = __require("node:http");
+    var { STATUS_CODES: STATUS_CODES2 } = __require("node:http");
     var {
       types: {
         isPromise
@@ -12805,7 +12805,7 @@ var require_mock_utils = __commonJS({
       return result;
     }
     function getStatusText(statusCode) {
-      return STATUS_CODES[statusCode] || "unknown";
+      return STATUS_CODES2[statusCode] || "unknown";
     }
     async function getResponse(body) {
       const buffers = [];
@@ -13218,13 +13218,13 @@ var require_mock_call_history = __commonJS({
     function makeFilterCalls(parameterName) {
       return (parameterValue, logs) => {
         if (typeof parameterValue === "string" || parameterValue == null) {
-          return logs.filter((log3) => {
-            return log3[parameterName] === parameterValue;
+          return logs.filter((log4) => {
+            return log4[parameterName] === parameterValue;
           });
         }
         if (parameterValue instanceof RegExp) {
-          return logs.filter((log3) => {
-            return parameterValue.test(log3[parameterName]);
+          return logs.filter((log4) => {
+            return parameterValue.test(log4[parameterName]);
           });
         }
         throw new InvalidArgumentError(`${parameterName} parameter should be one of string, regexp, undefined or null`);
@@ -13319,8 +13319,8 @@ var require_mock_call_history = __commonJS({
           return this.logs.filter(criteria);
         }
         if (criteria instanceof RegExp) {
-          return this.logs.filter((log3) => {
-            return criteria.test(log3.toString());
+          return this.logs.filter((log4) => {
+            return criteria.test(log4.toString());
           });
         }
         if (typeof criteria === "object" && criteria !== null) {
@@ -13370,13 +13370,13 @@ var require_mock_call_history = __commonJS({
         this.logs = [];
       }
       [kMockCallHistoryAddLog](requestInit) {
-        const log3 = new MockCallHistoryLog(requestInit);
-        this.logs.push(log3);
-        return log3;
+        const log4 = new MockCallHistoryLog(requestInit);
+        this.logs.push(log4);
+        return log4;
       }
       *[Symbol.iterator]() {
-        for (const log3 of this.calls()) {
-          yield log3;
+        for (const log4 of this.calls()) {
+          yield log4;
         }
       }
     };
@@ -20411,7 +20411,7 @@ var require_fetch = __commonJS({
     var { dataURLProcessor, serializeAMimeType, minimizeSupportedMimeType } = require_data_url();
     var { getGlobalDispatcher } = require_global2();
     var { webidl } = require_webidl();
-    var { STATUS_CODES } = __require("node:http");
+    var { STATUS_CODES: STATUS_CODES2 } = __require("node:http");
     var { bytesMatch } = require_subresource_integrity();
     var { createDeferredPromise } = require_promise();
     var { isomorphicEncode } = require_infra();
@@ -21448,7 +21448,7 @@ var require_fetch = __commonJS({
               }
               resolve5({
                 status,
-                statusText: STATUS_CODES[status],
+                statusText: STATUS_CODES2[status],
                 headersList,
                 socket
               });
@@ -21472,7 +21472,7 @@ var require_fetch = __commonJS({
               }
               resolve5({
                 status,
-                statusText: STATUS_CODES[status],
+                statusText: STATUS_CODES2[status],
                 headersList,
                 socket
               });
@@ -26130,6 +26130,8 @@ var handleBeforeExit = () => {
 
 // ../../src/registry-client/src/index.ts
 import { randomUUID } from "node:crypto";
+import { readFileSync as readFileSync2 } from "node:fs";
+import { STATUS_CODES } from "node:http";
 import { availableParallelism } from "node:os";
 import { dirname as dirname3, resolve as resolve4 } from "node:path";
 import { setTimeout as setTimeout2 } from "node:timers/promises";
@@ -27071,7 +27073,8 @@ var otplease = async (client, options, response) => {
       const notice = String(npmNotice);
       const match = otpChallengeNotice.exec(notice);
       if (match?.[1]) {
-        await urlOpen(match[1]);
+        await urlOpen(match[1]).catch(() => {
+        });
         log(notice);
         return {
           retry: {
@@ -27356,6 +27359,7 @@ var exchangeToken = async (idToken, packageName, registry) => {
 };
 
 // ../../src/registry-client/src/index.ts
+var log3 = (msg) => console.error(msg);
 var isCacheableMethod = (m) => m === "GET" || m === "HEAD";
 var cacheKey = (method, url) => `${method !== "GET" ? method + " " : ""}${url}`;
 var { version } = loadPackageJson(
@@ -27511,9 +27515,18 @@ var RegistryClient = class {
         return;
       }
     }
-    throw error("Failed to perform web login", { response });
+    const { statusCode } = response;
+    const status = STATUS_CODES[statusCode];
+    throw error(
+      `Failed to perform web login: ${statusCode}${status ? ` ${status}` : ""}`,
+      {
+        code: "EREQUEST",
+        url: webLoginURL,
+        status: statusCode,
+        response
+      }
+    );
   }
-  /* c8 ignore stop */
   /**
    * Given a {@link WebAuthChallenge}, open the `authUrl` in a browser and
    * hang on the `doneUrl` until it returns a {@link TokenResponse} object.
@@ -27528,8 +27541,9 @@ var RegistryClient = class {
       }),
       urlOpen(authUrl, { signal }).catch((er) => {
         if (asError(er).name === "AbortError") return;
-        ac.abort();
-        throw er;
+        log3(
+          `Could not open a browser. Please open ${authUrl} manually.`
+        );
       })
     ]);
     return result;
@@ -27573,6 +27587,52 @@ var RegistryClient = class {
       response
     });
   }
+  /**
+   * Read a valid cached non-JSON body straight off disk, bypassing the
+   * in-memory cache LRU so that a tarball is never held in it.
+   *
+   * One read: the head is decoded from the same bytes the body comes
+   * from, so `cache-unzip` rewriting the head cannot land between the
+   * two and hand back a body at a stale offset.
+   *
+   * Does not log a cache hit -- the caller may still reject the body
+   * and fall back to {@link request}, which logs its own.
+   *
+   * Returns undefined on anything unexpected; callers fall back to
+   * {@link request}.
+   */
+  cachedBody(url, options = {}) {
+    const { integrity, method = "GET" } = options;
+    try {
+      const key = cacheKey(
+        method,
+        typeof url === "string" ? new URL(url) : url
+      );
+      if (this.cache.peek(key)) return void 0;
+      const paths = /* @__PURE__ */ new Set();
+      try {
+        const i = this.cache.integrityPath(integrity);
+        if (i) paths.add(i);
+      } catch {
+      }
+      paths.add(this.cache.path(key));
+      for (const path of paths) {
+        let buf;
+        try {
+          buf = readFileSync2(path);
+        } catch {
+          continue;
+        }
+        const entry = CacheEntry.decode(buf);
+        if (entry.statusCode !== 200 || !entry.valid || entry.isJSON) {
+          continue;
+        }
+        return { path, body: entry.buffer() };
+      }
+    } catch {
+    }
+    return void 0;
+  }
   async request(url, options = {}) {
     const u = typeof url === "string" ? new URL(url) : url;
     const {

package/{chunk-BJBFEQRR.js → chunk-BHJT53TP.js}

@@ -663,5 +663,6 @@ var rimraf = Object.assign(rimraf_, {
 rimraf.rimraf = rimraf;
 
 export {
+  rimrafSync,
   rimraf
 };

package/{chunk-GVZRKITF.js → chunk-EBXBZ2Y5.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-A4EKZ32F.js";
+} from "./chunk-HRY5MJCA.js";
 import {
   Monorepo,
   PackageJson,
   PathScurry
-} from "./chunk-SVBEF5PK.js";
+} from "./chunk-USTJECVS.js";
 import {
   resetCaches
-} from "./chunk-3OPNZI6G.js";
+} from "./chunk-YOE3VZFX.js";
 import {
   commands,
   defaultValues,

package/{chunk-ADYHZTEI.js → chunk-GKCU7R4B.js}

@@ -9,18 +9,24 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
+import {
+  openUrl
+} from "./chunk-2HDWM6AD.js";
 import {
   stderr
-} from "./chunk-OUF2P2OD.js";
+} from "./chunk-MXCWH7WC.js";
 import {
   mermaidOutput
-} from "./chunk-3NGV7EC6.js";
+} from "./chunk-LHMEJF6J.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
 import {
-  urlOpen
-} from "./chunk-HAYXR3MW.js";
+  getTokenByURL
+} from "./chunk-ATYE2HQV.js";
+
+// ../../src/cli-sdk/src/query-auth.ts
+var createGetAuthHeader = (conf) => async (url) => getTokenByURL(url, conf.options.identity);
 
 // ../../src/cli-sdk/src/mermaid-image-view.ts
 var MermaidImageView = class extends ViewClass {
@@ -36,16 +42,17 @@ var MermaidImageView = class extends ViewClass {
       stderr(`Generating PNG image...`);
       const filePath = await renderMermaidToPng(mermaidText);
       stderr(`Image saved to: ${filePath}`);
-      await urlOpen(filePath);
+      await openUrl(filePath);
     } else {
       stderr(`Generating SVG image...`);
       const filePath = await renderMermaidToFile(mermaidText);
       stderr(`Image saved to: ${filePath}`);
-      await urlOpen(filePath);
+      await openUrl(filePath);
     }
   }
 };
 
 export {
+  createGetAuthHeader,
   MermaidImageView
 };