@vltpkg/cli-js 1.0.8 → 1.0.10

package/{ping-G765RWLM.js → ping-ANBW2IRW.js}

@@ -14,20 +14,20 @@ import {
 } from "./chunk-5JFRXIK2.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import {
   RegistryClient
-} from "./chunk-AGHW2E24.js";
+} from "./chunk-NWLS3VOQ.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{pkg-D4S3SPUH.js → pkg-GZWUXU65.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   views
-} from "./chunk-3L2ERW54.js";
+} from "./chunk-DAS7TVRN.js";
 import {
   del,
   get,
@@ -19,34 +19,34 @@ import {
 } from "./chunk-DBANBIL2.js";
 import {
   createHostContextsMap
-} from "./chunk-NC3QYZPW.js";
+} from "./chunk-WAYVHANF.js";
 import {
   GraphModifier,
   Query,
   VIRTUAL_ROOT_ID,
   actual,
   init
-} from "./chunk-7D7SNVBV.js";
+} from "./chunk-FUCQ7ARR.js";
 import {
   SecurityArchive
-} from "./chunk-FG633ZKS.js";
+} from "./chunk-2YJ5MESP.js";
 import {
   minimatch
-} from "./chunk-OWML62W5.js";
+} from "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{profile-YDQGMWYP.js → profile-BLY74CMB.js}

@@ -14,20 +14,20 @@ import {
 } from "./chunk-5JFRXIK2.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import {
   RegistryClient
-} from "./chunk-AGHW2E24.js";
+} from "./chunk-NWLS3VOQ.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{publish-ANHSZPIM.js → publish-W2KOTNMB.js}

@@ -11,18 +11,18 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   packTarball
-} from "./chunk-MUG5K6X2.js";
+} from "./chunk-XFI4THXZ.js";
 import {
   createHostContextsMap
-} from "./chunk-NC3QYZPW.js";
+} from "./chunk-WAYVHANF.js";
 import "./chunk-ZWKI5OSF.js";
 import {
   prettyBytes
 } from "./chunk-XA47WS4N.js";
 import {
   stderr
-} from "./chunk-JXVDCQZF.js";
-import "./chunk-YAIKXFLN.js";
+} from "./chunk-VL7RJVNN.js";
+import "./chunk-5HBKYSTX.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import {
@@ -33,34 +33,34 @@ import {
   Query,
   actual,
   run
-} from "./chunk-7D7SNVBV.js";
-import "./chunk-FG633ZKS.js";
+} from "./chunk-FUCQ7ARR.js";
+import "./chunk-2YJ5MESP.js";
 import {
   minimatch
-} from "./chunk-OWML62W5.js";
+} from "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
 import {
   RegistryClient,
   oidc,
   registryBase
-} from "./chunk-AGHW2E24.js";
+} from "./chunk-NWLS3VOQ.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
-import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
-import "./chunk-VE6CCH33.js";
 import {
   asError
 } from "./chunk-VFBCWAOC.js";
+import "./chunk-XNLSTHDK.js";
+import "./chunk-BHJT53TP.js";
+import "./chunk-VE6CCH33.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -349,21 +349,33 @@ var commandSingle = async (location, conf) => {
       });
     } catch (err) {
       throw error("Failed to publish package", {
+        code: "EREQUEST",
+        url: publishUrl,
+        method: "PUT",
         cause: asError(err)
       });
     }
     if (response.statusCode < 200 || response.statusCode >= 300) {
+      const denied = response.statusCode === 401 || response.statusCode === 403;
       let advice = "";
       if (response.statusCode === 409) {
         advice = `
 \u26A0\uFE0F ${name}@${version} already exists in the registry. Bump the version and try again.`;
       } else if (response.statusCode === 404) {
         advice = "\n\u26A0\uFE0F Make sure you're logged in and have access to publish the package.";
+      } else if (response.statusCode === 401) {
+        advice = `
+\u26A0\uFE0F Not logged in to ${registryUrl.origin}. Run \`vlt login\` and try again.`;
+      } else if (response.statusCode === 403) {
+        advice = `
+\u26A0\uFE0F ${name} cannot be published by this account. Run \`vlt whoami\` to see who you are logged in as, and \`vlt login\` to switch accounts. A name already taken by someone else cannot be reused.`;
       }
       throw error(
         `Failed to publish package: ${registryErrorMessage(response)}${advice}`,
         {
+          code: denied ? "ENEEDAUTH" : "EREQUEST",
           url: publishUrl,
+          method: "PUT",
           response
         }
       );

package/{query-PZ6C6AZJ.js → query-3PUMU5ON.js}

@@ -12,18 +12,18 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   MermaidImageView,
   createGetAuthHeader
-} from "./chunk-ZXIF4PVX.js";
+} from "./chunk-XUP35M5Q.js";
 import {
   createDiffFilesProvider
 } from "./chunk-RIYFGX27.js";
-import "./chunk-OB73T23B.js";
+import "./chunk-ZNCVQQDT.js";
 import {
   createHostContextsMap
-} from "./chunk-NC3QYZPW.js";
+} from "./chunk-WAYVHANF.js";
 import {
   stdout
-} from "./chunk-JXVDCQZF.js";
-import "./chunk-YAIKXFLN.js";
+} from "./chunk-VL7RJVNN.js";
+import "./chunk-5HBKYSTX.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import "./chunk-5JFRXIK2.js";
@@ -36,28 +36,28 @@ import {
   humanReadableOutput,
   jsonOutput,
   mermaidOutput
-} from "./chunk-7D7SNVBV.js";
+} from "./chunk-FUCQ7ARR.js";
 import {
   SecurityArchive
-} from "./chunk-FG633ZKS.js";
-import "./chunk-OWML62W5.js";
+} from "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-AGHW2E24.js";
+import "./chunk-NWLS3VOQ.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{registry-BMWXMQS4.js → registry-ONSDWNPV.js}

@@ -14,13 +14,13 @@ import {
 } from "./chunk-5JFRXIK2.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
 import {
   getCommand
-} from "./chunk-XISRK3R5.js";
-import "./chunk-XNLSTHDK.js";
+} from "./chunk-MNK55XSE.js";
 import "./chunk-VFBCWAOC.js";
+import "./chunk-XNLSTHDK.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/registry-client-package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/registry-client",
   "description": "Fetch package artifacts and metadata from registries",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",

package/registry-client-src-revalidate.js

@@ -12599,7 +12599,7 @@ var require_mock_utils = __commonJS({
       kTotalDispatchCount
     } = require_mock_symbols();
     var { serializePathWithQuery } = require_util();
-    var { STATUS_CODES } = __require("node:http");
+    var { STATUS_CODES: STATUS_CODES2 } = __require("node:http");
     var {
       types: {
         isPromise
@@ -12807,7 +12807,7 @@ var require_mock_utils = __commonJS({
       return result;
     }
     function getStatusText(statusCode) {
-      return STATUS_CODES[statusCode] || "unknown";
+      return STATUS_CODES2[statusCode] || "unknown";
     }
     async function getResponse(body) {
       const buffers = [];
@@ -20413,7 +20413,7 @@ var require_fetch = __commonJS({
     var { dataURLProcessor, serializeAMimeType, minimizeSupportedMimeType } = require_data_url();
     var { getGlobalDispatcher } = require_global2();
     var { webidl } = require_webidl();
-    var { STATUS_CODES } = __require("node:http");
+    var { STATUS_CODES: STATUS_CODES2 } = __require("node:http");
     var { bytesMatch } = require_subresource_integrity();
     var { createDeferredPromise } = require_promise();
     var { isomorphicEncode } = require_infra();
@@ -21450,7 +21450,7 @@ var require_fetch = __commonJS({
               }
               resolve11({
                 status,
-                statusText: STATUS_CODES[status],
+                statusText: STATUS_CODES2[status],
                 headersList,
                 socket
               });
@@ -21474,7 +21474,7 @@ var require_fetch = __commonJS({
               }
               resolve11({
                 status,
-                statusText: STATUS_CODES[status],
+                statusText: STATUS_CODES2[status],
                 headersList,
                 socket
               });
@@ -32441,6 +32441,8 @@ var XDG = class {
 
 // ../../src/registry-client/src/index.ts
 import { randomUUID } from "node:crypto";
+import { readFileSync as readFileSync3 } from "node:fs";
+import { STATUS_CODES } from "node:http";
 import { availableParallelism } from "node:os";
 import { dirname as dirname4, resolve as resolve10 } from "node:path";
 import { setTimeout as setTimeout3 } from "node:timers/promises";
@@ -33702,9 +33704,18 @@ var RegistryClient = class {
         return;
       }
     }
-    throw error("Failed to perform web login", { response });
+    const { statusCode } = response;
+    const status = STATUS_CODES[statusCode];
+    throw error(
+      `Failed to perform web login: ${statusCode}${status ? ` ${status}` : ""}`,
+      {
+        code: "EREQUEST",
+        url: webLoginURL,
+        status: statusCode,
+        response
+      }
+    );
   }
-  /* c8 ignore stop */
   /**
    * Given a {@link WebAuthChallenge}, open the `authUrl` in a browser and
    * hang on the `doneUrl` until it returns a {@link TokenResponse} object.
@@ -33765,6 +33776,52 @@ var RegistryClient = class {
       response
     });
   }
+  /**
+   * Read a valid cached non-JSON body straight off disk, bypassing the
+   * in-memory cache LRU so that a tarball is never held in it.
+   *
+   * One read: the head is decoded from the same bytes the body comes
+   * from, so `cache-unzip` rewriting the head cannot land between the
+   * two and hand back a body at a stale offset.
+   *
+   * Does not log a cache hit -- the caller may still reject the body
+   * and fall back to {@link request}, which logs its own.
+   *
+   * Returns undefined on anything unexpected; callers fall back to
+   * {@link request}.
+   */
+  cachedBody(url, options = {}) {
+    const { integrity, method = "GET" } = options;
+    try {
+      const key = cacheKey(
+        method,
+        typeof url === "string" ? new URL(url) : url
+      );
+      if (this.cache.peek(key)) return void 0;
+      const paths = /* @__PURE__ */ new Set();
+      try {
+        const i2 = this.cache.integrityPath(integrity);
+        if (i2) paths.add(i2);
+      } catch {
+      }
+      paths.add(this.cache.path(key));
+      for (const path2 of paths) {
+        let buf;
+        try {
+          buf = readFileSync3(path2);
+        } catch {
+          continue;
+        }
+        const entry = CacheEntry.decode(buf);
+        if (entry.statusCode !== 200 || !entry.valid || entry.isJSON) {
+          continue;
+        }
+        return { path: path2, body: entry.buffer() };
+      }
+    } catch {
+    }
+    return void 0;
+  }
   async request(url, options = {}) {
     const u2 = typeof url === "string" ? new URL(url) : url;
     const {
@@ -33773,7 +33830,8 @@ var RegistryClient = class {
       redirections = /* @__PURE__ */ new Set(),
       signal,
       otp = (process.env.VLT_OTP ?? "").trim(),
-      staleWhileRevalidate = true
+      staleWhileRevalidate = true,
+      forceRevalidate = false
     } = options;
     let { trustIntegrity } = options;
     const m2 = isCacheableMethod(method) ? method : void 0;
@@ -33782,11 +33840,12 @@ var RegistryClient = class {
     const key = cacheKey(method, u2);
     const buffer = useCache ? await this.cache.fetch(key, { context: { integrity } }) : void 0;
     const entry = buffer ? this.#decodeCached(buffer) : void 0;
-    if (entry?.valid) {
+    if (entry?.valid && !forceRevalidate) {
       logRequest(url, "cache", { method });
       return entry;
     }
-    if (staleWhileRevalidate && entry?.staleWhileRevalidate && m2) {
+    const forcedFallback = forceRevalidate && entry?.staleWhileRevalidate ? entry : void 0;
+    if (!forceRevalidate && staleWhileRevalidate && entry?.staleWhileRevalidate && m2) {
       register2(dirname4(this.cache.path()), m2, url);
       logRequest(url, "stale", { method });
       return entry;
@@ -33832,6 +33891,10 @@ var RegistryClient = class {
         options
       );
     } catch (er) {
+      if (forcedFallback && !signal?.aborted) {
+        logRequest(url, "stale", { method });
+        return forcedFallback;
+      }
       throw error("Request failed", {
         code: "EREQUEST",
         cause: er,
@@ -33860,7 +33923,8 @@ var RegistryClient = class {
     if (result.isGzip && !trustIntegrity) {
       result.checkIntegrity({ url });
     }
-    if (useCache) {
+    const clobbersCachedEntry = forceRevalidate && !!entry && result.statusCode !== 200;
+    if (useCache && !clobbersCachedEntry) {
       const buffer2 = result.encode();
       this.cache.set(
         key,

package/{repo-ZA3TMERE.js → repo-LZ6STH4C.js}

@@ -14,16 +14,16 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   openUrl
-} from "./chunk-OB73T23B.js";
+} from "./chunk-ZNCVQQDT.js";
 import {
   createHostContextsMap
-} from "./chunk-NC3QYZPW.js";
+} from "./chunk-WAYVHANF.js";
 import {
   PackageInfoClient
-} from "./chunk-YCVPEZRM.js";
+} from "./chunk-P5S2TFCF.js";
 import "./chunk-ZWKI5OSF.js";
-import "./chunk-JXVDCQZF.js";
-import "./chunk-YAIKXFLN.js";
+import "./chunk-VL7RJVNN.js";
+import "./chunk-5HBKYSTX.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import "./chunk-5JFRXIK2.js";
@@ -31,29 +31,29 @@ import "./chunk-WGDTG44V.js";
 import {
   Query,
   actual
-} from "./chunk-7D7SNVBV.js";
+} from "./chunk-FUCQ7ARR.js";
 import {
   SecurityArchive
-} from "./chunk-FG633ZKS.js";
-import "./chunk-OWML62W5.js";
+} from "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import {
   Spec
 } from "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-HAYXR3MW.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{run-N4NK35UT.js → run-JMIBADHE.js}

@@ -12,11 +12,11 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-UYIA44HE.js";
+} from "./chunk-B5IILBX7.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-NC3QYZPW.js";
-import "./chunk-JXVDCQZF.js";
-import "./chunk-YAIKXFLN.js";
+import "./chunk-WAYVHANF.js";
+import "./chunk-VL7RJVNN.js";
+import "./chunk-5HBKYSTX.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import "./chunk-5JFRXIK2.js";
@@ -25,24 +25,24 @@ import "./chunk-WGDTG44V.js";
 import {
   run,
   runFG
-} from "./chunk-7D7SNVBV.js";
-import "./chunk-FG633ZKS.js";
-import "./chunk-OWML62W5.js";
+} from "./chunk-FUCQ7ARR.js";
+import "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 

package/{run-exec-N5FT4QO7.js → run-exec-JEKM2O53.js}

@@ -12,11 +12,11 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-UYIA44HE.js";
+} from "./chunk-B5IILBX7.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-NC3QYZPW.js";
-import "./chunk-JXVDCQZF.js";
-import "./chunk-YAIKXFLN.js";
+import "./chunk-WAYVHANF.js";
+import "./chunk-VL7RJVNN.js";
+import "./chunk-5HBKYSTX.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-GDJ7JT2R.js";
 import "./chunk-5JFRXIK2.js";
@@ -25,24 +25,24 @@ import "./chunk-WGDTG44V.js";
 import {
   runExec,
   runExecFG
-} from "./chunk-7D7SNVBV.js";
-import "./chunk-FG633ZKS.js";
-import "./chunk-OWML62W5.js";
+} from "./chunk-FUCQ7ARR.js";
+import "./chunk-2YJ5MESP.js";
+import "./chunk-USTJECVS.js";
 import "./chunk-YOE3VZFX.js";
 import {
   commandUsage
-} from "./chunk-PTR5IGFQ.js";
+} from "./chunk-5HPGL5WS.js";
 import "./chunk-XKVU23NC.js";
-import "./chunk-XISRK3R5.js";
+import "./chunk-MNK55XSE.js";
 import "./chunk-4KCU2KZL.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-E74WGW5C.js";
 import "./chunk-LPIBYUMT.js";
 import "./chunk-UBLFPJHV.js";
+import "./chunk-VFBCWAOC.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BJBFEQRR.js";
+import "./chunk-BHJT53TP.js";
 import "./chunk-VE6CCH33.js";
-import "./chunk-VFBCWAOC.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";