@vltpkg/cli-js 1.2.0 → 1.3.0

package/{access-FTHPFPUJ.js → access-HIVJOWXZ.js}

@@ -11,25 +11,25 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   resolveRegistry
-} from "./chunk-O44Z6MAV.js";
+} from "./chunk-D2LEK7VS.js";
 import {
   commandUsage
-} from "./chunk-55DYW2MP.js";
-import "./chunk-G5NJ7CYI.js";
-import "./chunk-6A3XS52F.js";
+} from "./chunk-I6QGYSB4.js";
+import "./chunk-V7EQZOO5.js";
+import "./chunk-ENSGPOLR.js";
 import {
   RegistryClient
-} from "./chunk-OE6VHHN4.js";
+} from "./chunk-FHMIECHI.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-UQUIO7LW.js";
-import "./chunk-JTUZP2OD.js";
+} from "./chunk-ZNUXDX6R.js";
+import "./chunk-VBADA6QU.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BHJT53TP.js";
-import "./chunk-VE6CCH33.js";
-import "./chunk-G5BSQ6DP.js";
+import "./chunk-PDWPFR5T.js";
+import "./chunk-Y5PA7DVK.js";
+import "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{bugs-QS6HQUO2.js → bugs-2KFUYMPS.js}

@@ -14,46 +14,46 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   openUrl
-} from "./chunk-3CUFJPBK.js";
+} from "./chunk-HCZOVC3Y.js";
 import {
   createHostContextsMap
-} from "./chunk-YFNQ6HZ3.js";
-import "./chunk-UNWQVOLY.js";
-import "./chunk-GUATFMMU.js";
+} from "./chunk-2HXJ4ZSF.js";
+import "./chunk-MJWUULO6.js";
+import "./chunk-CU752KW7.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-YTT3UHUB.js";
+import "./chunk-33HBY5CF.js";
 import {
   PackageInfoClient
-} from "./chunk-5YB6UIC3.js";
+} from "./chunk-SVMH3NDM.js";
 import "./chunk-ZWKI5OSF.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-O44Z6MAV.js";
+import "./chunk-D2LEK7VS.js";
 import {
   Query,
   actual
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   SecurityArchive
-} from "./chunk-FOJCK57G.js";
+} from "./chunk-JFHEXCG5.js";
 import {
   commandUsage
-} from "./chunk-55DYW2MP.js";
-import "./chunk-6G7MTZGS.js";
+} from "./chunk-I6QGYSB4.js";
+import "./chunk-P4LLYWCG.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-SYGF27W7.js";
+import "./chunk-J3R4XWB3.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
-import "./chunk-6A3XS52F.js";
+} from "./chunk-V7EQZOO5.js";
+import "./chunk-ENSGPOLR.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-APMYKJI2.js";
-import "./chunk-UQUIO7LW.js";
-import "./chunk-JTUZP2OD.js";
+import "./chunk-ZNUXDX6R.js";
+import "./chunk-VBADA6QU.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BHJT53TP.js";
-import "./chunk-VE6CCH33.js";
-import "./chunk-G5BSQ6DP.js";
+import "./chunk-PDWPFR5T.js";
+import "./chunk-Y5PA7DVK.js";
+import "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{build-H27SXMAS.js → build-CX6YZ4LS.js}

@@ -11,24 +11,24 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-B2FK2HHL.js";
-import "./chunk-FOJCK57G.js";
+} from "./chunk-J2WL3A3C.js";
+import "./chunk-JFHEXCG5.js";
 import {
   commandUsage
-} from "./chunk-55DYW2MP.js";
-import "./chunk-6G7MTZGS.js";
-import "./chunk-SYGF27W7.js";
-import "./chunk-G5NJ7CYI.js";
-import "./chunk-6A3XS52F.js";
+} from "./chunk-I6QGYSB4.js";
+import "./chunk-P4LLYWCG.js";
+import "./chunk-J3R4XWB3.js";
+import "./chunk-V7EQZOO5.js";
+import "./chunk-ENSGPOLR.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-JTUZP2OD.js";
+import "./chunk-VBADA6QU.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-BHJT53TP.js";
-import "./chunk-VE6CCH33.js";
+import "./chunk-PDWPFR5T.js";
+import "./chunk-Y5PA7DVK.js";
 import {
   isErrorWithCause
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{cache-IB4HMFDT.js → cache-I6L5ZRGD.js}

@@ -15,31 +15,31 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-UNWQVOLY.js";
-import "./chunk-GUATFMMU.js";
+} from "./chunk-MJWUULO6.js";
+import "./chunk-CU752KW7.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-YTT3UHUB.js";
+import "./chunk-33HBY5CF.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-O44Z6MAV.js";
+import "./chunk-D2LEK7VS.js";
 import {
   commandUsage
-} from "./chunk-55DYW2MP.js";
+} from "./chunk-I6QGYSB4.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
-import "./chunk-SYGF27W7.js";
+import "./chunk-J3R4XWB3.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
-import "./chunk-6A3XS52F.js";
+} from "./chunk-V7EQZOO5.js";
+import "./chunk-ENSGPOLR.js";
 import {
   CacheEntry
-} from "./chunk-OE6VHHN4.js";
+} from "./chunk-FHMIECHI.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-UQUIO7LW.js";
-import "./chunk-JTUZP2OD.js";
+} from "./chunk-ZNUXDX6R.js";
+import "./chunk-VBADA6QU.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import {
@@ -50,12 +50,12 @@ import {
   storeEntryNames,
   storeEntryTime,
   verifyStoreEntry
-} from "./chunk-QA6RE2GS.js";
-import "./chunk-BHJT53TP.js";
-import "./chunk-VE6CCH33.js";
+} from "./chunk-263MHLR3.js";
+import "./chunk-PDWPFR5T.js";
+import "./chunk-Y5PA7DVK.js";
 import {
   integrityHex
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/cache-unzip-src-unzip.js

@@ -1762,6 +1762,11 @@ var normalizeBinPaths = (manifest) => {
 var integrityRE = /^sha512-[a-zA-Z0-9/+]{86}==$/;
 var isIntegrity = (i) => typeof i === "string" && integrityRE.test(i);
 var integrityHex = (i) => isIntegrity(i) ? Buffer.from(i.slice(7), "base64").toString("hex") : void 0;
+var BROTLI_TARBALL_EXT = ".tar.br";
+var tarballFormat = (url) => {
+  const end = /[?#]/.exec(url)?.index ?? url.length;
+  return url.endsWith(BROTLI_TARBALL_EXT, end) ? "brotli" : void 0;
+};
 var asError = (er, fallbackMessage = "Unknown error") => er instanceof Error ? er : new Error(String(er) || fallbackMessage);
 var isObject = (v2) => !!v2 && typeof v2 === "object" && (v2.constructor === Object || v2.constructor === void 0);
 var maybeRecordStringString = (o) => o === void 0 || isRecordStringString(o);
@@ -6889,7 +6894,12 @@ var parseKVLine = (set, line) => {
 };
 
 // ../../src/tar/src/unpack.ts
-import { unzip as unzipCB, unzipSync as unzipSyncCB } from "node:zlib";
+import {
+  brotliDecompress as brotliCB,
+  brotliDecompressSync as brotliSyncCB,
+  unzip as unzipCB,
+  unzipSync as unzipSyncCB
+} from "node:zlib";
 
 // ../../src/tar/src/find-tar-dir.ts
 var findTarDir = (path, tarDir) => {
@@ -6928,6 +6938,16 @@ var unzipSync = (input) => {
     throw unzipError(er, input.length, max);
   }
 };
+var isGzip = (b) => b[0] === 31 && b[1] === 139;
+var brotliSync = (input) => {
+  const max = unzipMax(input.length);
+  try {
+    return brotliSyncCB(input, { maxOutputLength: max });
+  } catch (er) {
+    throw unzipError(er, input.length, max);
+  }
+};
+var decompressSync = (input, format) => format === "brotli" ? brotliSync(input) : isGzip(input) ? unzipSync(input) : input;
 var tmp = randomBytes2(6).toString("hex") + ".";
 var foldKeys = process.platform === "darwin" || process.platform === "win32";
 var entryKey = (p) => foldKeys ? p.toLowerCase() : p;
@@ -6975,10 +6995,9 @@ var checkFs = (h, tarDir, target) => {
   return true;
 };
 var parseTarball = (buffer, tmp2) => {
-  const isGzip = buffer[0] === 31 && buffer[1] === 139;
-  if (isGzip) {
+  if (isGzip(buffer)) {
     throw error("still gzipped after unzipping", {
-      found: isGzip,
+      found: true,
       wanted: false
     });
   }
@@ -7081,10 +7100,9 @@ var parseTarball = (buffer, tmp2) => {
   }
   return { dirs, files };
 };
-var storeLayout = (tarData, dir) => {
-  const isGzip = tarData[0] === 31 && tarData[1] === 139;
+var storeLayout = (tarData, dir, format) => {
   const { dirs, files } = parseTarball(
-    isGzip ? unzipSync(tarData) : tarData,
+    decompressSync(tarData, format),
     dir
   );
   const rel = (p) => relative(dir, p).replace(/\\/g, "/");
@@ -7126,8 +7144,8 @@ var storeLayout = (tarData, dir) => {
     binFiles
   };
 };
-var unpackToStoreSync = (tarData, dir) => {
-  const { index, files, binFiles } = storeLayout(tarData, dir);
+var unpackToStoreSync = (tarData, dir, format) => {
+  const { index, files, binFiles } = storeLayout(tarData, dir, format);
   mkdirSync2(dirname2(dir), { recursive: true });
   mkdirSync2(dir, { mode: 511 });
   let succeeded = false;
@@ -7200,7 +7218,7 @@ var sweep = (tmp2) => {
   }
 };
 var seq = 0;
-var explodeEntry = (store, buf) => {
+var explodeEntry = (store, buf, format) => {
   const hex = integrityHex(entryIntegrity(buf));
   if (!hex) return "ignored";
   const entry = join2(store, hex);
@@ -7213,7 +7231,8 @@ var explodeEntry = (store, buf) => {
   const sideTmp = join2(store, ".tmp", `${hex}.json.${n7}`);
   const { index } = unpackToStoreSync(
     buf.subarray(buf.readUInt32BE(0)),
-    tmp2
+    tmp2,
+    format
   );
   try {
     writeFileSync2(sideTmp, JSON.stringify(index));
@@ -7256,7 +7275,7 @@ var explode = async (cache, store, keys, integrities) => {
         continue;
       }
       try {
-        const res = explodeEntry(store, buf);
+        const res = explodeEntry(store, buf, tarballFormat(key));
         if (typeof res === "number") {
           s.exploded.add(key);
           s.written++;

package/{chunk-QA6RE2GS.js → chunk-263MHLR3.js}

@@ -12,11 +12,11 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   rimraf,
   rimrafSync
-} from "./chunk-BHJT53TP.js";
+} from "./chunk-PDWPFR5T.js";
 import {
   isManifest,
   normalizeBinPaths
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -87,7 +87,13 @@ import {
   statSync,
   writeFileSync
 } from "node:fs";
-import { lstat, mkdir, rename, writeFile } from "node:fs/promises";
+import {
+  lstat,
+  mkdir,
+  readFile,
+  rename,
+  writeFile
+} from "node:fs/promises";
 import {
   basename as basename2,
   dirname,
@@ -590,7 +596,12 @@ var parseKVLine = (set, line) => {
 };
 
 // ../../src/tar/src/unpack.ts
-import { unzip as unzipCB, unzipSync as unzipSyncCB } from "node:zlib";
+import {
+  brotliDecompress as brotliCB,
+  brotliDecompressSync as brotliSyncCB,
+  unzip as unzipCB,
+  unzipSync as unzipSyncCB
+} from "node:zlib";
 
 // ../../src/tar/src/find-tar-dir.ts
 var findTarDir = (path, tarDir) => {
@@ -639,6 +650,27 @@ var unzipSync = (input) => {
     throw unzipError(er, input.length, max);
   }
 };
+var isGzip = (b) => b[0] === 31 && b[1] === 139;
+var brotli = async (input) => {
+  const max = unzipMax(input.length);
+  return new Promise(
+    (res, rej) => brotliCB(
+      input,
+      { maxOutputLength: max },
+      (er, result) => er ? rej(unzipError(er, input.length, max)) : res(result)
+    )
+  );
+};
+var brotliSync = (input) => {
+  const max = unzipMax(input.length);
+  try {
+    return brotliSyncCB(input, { maxOutputLength: max });
+  } catch (er) {
+    throw unzipError(er, input.length, max);
+  }
+};
+var decompress = async (input, format) => format === "brotli" ? brotli(input) : isGzip(input) ? unzip(input) : input;
+var decompressSync = (input, format) => format === "brotli" ? brotliSync(input) : isGzip(input) ? unzipSync(input) : input;
 var exists = async (path) => {
   try {
     await lstat(path);
@@ -737,24 +769,26 @@ var write = async (path, body, executable = false) => {
     mode: executable ? 511 : 438
   });
 };
-var unpack = async (tarData, target) => {
-  const isGzip = tarData[0] === 31 && tarData[1] === 139;
-  await unpackUnzipped(
-    isGzip ? await unzip(tarData) : tarData,
-    target
-  );
+var unpack = async (tarData, target, format) => {
+  await unpackUnzipped(await decompress(tarData, format), target);
 };
-var unpackSync = (tarData, target) => {
-  const isGzip = tarData[0] === 31 && tarData[1] === 139;
-  unpackUnzippedSync(isGzip ? unzipSync(tarData) : tarData, target);
+var unpackSync = (tarData, target, format) => {
+  unpackUnzippedSync(decompressSync(tarData, format), target);
 };
-var unpackFileSync = (file, target, offset = 0) => unpackSync(readFileSync2(file).subarray(offset), target);
+var unpackParallel = async (tarData, target, format) => {
+  unpackUnzippedSync(await decompress(tarData, format), target);
+};
+var unpackFileParallel = async (file, target, offset = 0, format) => unpackParallel(
+  (await readFile(file)).subarray(offset),
+  target,
+  format
+);
+var unpackFileSync = (file, target, offset = 0, format) => unpackSync(readFileSync2(file).subarray(offset), target, format);
 var tmpName = (target) => dirname(target) + sep + "." + basename2(target) + "." + tmpSuffix();
 var parseTarball = (buffer, tmp2) => {
-  const isGzip = buffer[0] === 31 && buffer[1] === 139;
-  if (isGzip) {
+  if (isGzip(buffer)) {
     throw error("still gzipped after unzipping", {
-      found: isGzip,
+      found: true,
       wanted: false
     });
   }
@@ -923,10 +957,9 @@ var unpackUnzippedSync = (buffer, target) => {
     }
   }
 };
-var storeLayout = (tarData, dir) => {
-  const isGzip = tarData[0] === 31 && tarData[1] === 139;
+var storeLayout = (tarData, dir, format) => {
   const { dirs, files } = parseTarball(
-    isGzip ? unzipSync(tarData) : tarData,
+    decompressSync(tarData, format),
     dir
   );
   const rel = (p) => relative(dir, p).replace(/\\/g, "/");
@@ -968,8 +1001,8 @@ var storeLayout = (tarData, dir) => {
     binFiles
   };
 };
-var unpackToStoreSync = (tarData, dir) => {
-  const { index, files, binFiles } = storeLayout(tarData, dir);
+var unpackToStoreSync = (tarData, dir, format) => {
+  const { index, files, binFiles } = storeLayout(tarData, dir, format);
   mkdirSync(dirname(dir), { recursive: true });
   mkdirSync(dir, { mode: 511 });
   let succeeded = false;
@@ -1101,6 +1134,8 @@ export {
   readStoreIndex,
   unpack,
   unpackSync,
+  unpackParallel,
+  unpackFileParallel,
   unpackFileSync,
   tmpName,
   unpackToStoreSync,

package/{chunk-YFNQ6HZ3.js → chunk-2HXJ4ZSF.js}

@@ -13,10 +13,10 @@ import {
   actual,
   callLimit,
   createVirtualRoot
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   SecurityArchive
-} from "./chunk-FOJCK57G.js";
+} from "./chunk-JFHEXCG5.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -140,7 +140,7 @@ var reloadConfig = async (folder) => {
     unload("project");
   } catch {
   }
-  const { Config } = await import("./config-4Y46SH5K.js");
+  const { Config } = await import("./config-HFF6XDCV.js");
   return Config.load(folder, process.argv, true);
 };
 

package/{chunk-YTT3UHUB.js → chunk-33HBY5CF.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   isError,
   isObject
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 
 // ../../src/output/src/error.ts
 var parseError = (err) => {

package/{chunk-LD4BQJBG.js → chunk-C6LK7C3L.js}

@@ -15,14 +15,14 @@ import {
   pairsToRecords,
   registrySelectionFields,
   registrySelectors
-} from "./chunk-5BD4QGW2.js";
+} from "./chunk-YZWFWSY7.js";
 import {
   normalizeRegistryURL
-} from "./chunk-O44Z6MAV.js";
+} from "./chunk-D2LEK7VS.js";
 import {
   getCommand,
   isRecordField
-} from "./chunk-6A3XS52F.js";
+} from "./chunk-ENSGPOLR.js";
 import {
   find
 } from "./chunk-HTOTG4TS.js";
@@ -33,7 +33,7 @@ import {
   defaultRegistries,
   defaultRegistryName,
   isObject
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-GUATFMMU.js → chunk-CU752KW7.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-WGDTG44V.js";
 import {
   commandAliases
-} from "./chunk-6A3XS52F.js";
+} from "./chunk-ENSGPOLR.js";
 
 // ../../node_modules/.vlt/~npm~package-json-from-dist@1.0.1/node_modules/package-json-from-dist/dist/esm/index.js
 import { readFileSync } from "node:fs";

package/{chunk-O44Z6MAV.js → chunk-D2LEK7VS.js}

@@ -14,7 +14,7 @@ import {
   defaultRegistryName,
   isErrorWithCause,
   isObject
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-6A3XS52F.js → chunk-ENSGPOLR.js}

@@ -1780,6 +1780,19 @@ var definition = j2.heading("Configuration").description(
   },
   "lockfile-only": {
     description: "Only update the lockfile (vlt-lock.json) and package.json files, skip all node_modules operations including package extraction and filesystem changes."
+  },
+  "brotli-tarballs": {
+    description: `Resolve to the Brotli (\`.tar.br\`) tarball when the
+                    registry advertises one for a version, transferring far
+                    less than the gzip \`.tgz\`.
+
+                    The \`.tar.br\` is its own artifact and hashes
+                    differently, so a version installed this way records that
+                    hash in \`vlt-lock.json\`. An existing lockfile keeps
+                    whichever artifact it already pinned; set
+                    \`--no-brotli-tarballs\` before resolving to pin the
+                    \`.tgz\` instead.`,
+    default: true
   }
 }).opt({
   "allow-scripts": {

package/{chunk-7KFMQ3BR.js → chunk-EP7AVBIO.js}

@@ -11,17 +11,17 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-5YB6UIC3.js";
+} from "./chunk-SVMH3NDM.js";
 import {
   findCmdShimIfExists,
   install
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   PathScurry
-} from "./chunk-6G7MTZGS.js";
+} from "./chunk-P4LLYWCG.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
+} from "./chunk-V7EQZOO5.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
@@ -30,7 +30,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   parseScope
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";