@vltpkg/cli-js 1.2.0 → 1.3.0

package/{chunk-6G7MTZGS.js → chunk-P4LLYWCG.js}

@@ -13,10 +13,10 @@ import {
   graphRun,
   graphRunSync,
   joinDepIDTuple
-} from "./chunk-SYGF27W7.js";
+} from "./chunk-J3R4XWB3.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
+} from "./chunk-V7EQZOO5.js";
 import {
   load,
   parse as parse2,
@@ -29,8 +29,9 @@ import {
   whichSync
 } from "./chunk-U7TEQCBN.js";
 import {
+  ot,
   ts
-} from "./chunk-VE6CCH33.js";
+} from "./chunk-Y5PA7DVK.js";
 import {
   Range,
   Version,
@@ -40,8 +41,9 @@ import {
   longDependencyTypes,
   normalizeManifest,
   parse,
+  parseRange,
   satisfies
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -5771,6 +5773,59 @@ var assertWSConfig = (conf, path2) => {
     wanted: "string | string[] | { [group: string]: string | string[] }"
   });
 };
+var manifestWSIgnoredKeys = /* @__PURE__ */ new Set(["nohoist"]);
+var asManifestWSConfig = (conf, path2) => {
+  if (conf && typeof conf === "object" && !Array.isArray(conf)) {
+    const groups = Object.keys(conf).filter(
+      (k) => k !== "packages" && !manifestWSIgnoredKeys.has(k)
+    );
+    if (groups.length) {
+      throw error(
+        'Named workspace groups are not supported in package.json. Move them to the "workspaces" field of vlt.json to use them.',
+        {
+          path: path2,
+          found: groups,
+          wanted: "string | string[] | { packages: string[] }"
+        }
+      );
+    }
+    const { packages } = conf;
+    if (packages === void 0) return {};
+    return asWSConfig({ packages }, path2);
+  }
+  return asWSConfig(conf, path2);
+};
+var resolveWSConfig = (projectRoot, packageJson = new PackageJson()) => {
+  const fromVltJson = load("workspaces", assertWSConfig);
+  if (fromVltJson !== void 0) {
+    return { config: asWSConfig(fromVltJson), source: "vlt.json" };
+  }
+  const workspaces = packageJson.maybeRead(projectRoot)?.workspaces;
+  if (workspaces === void 0) return { config: {} };
+  return {
+    config: asManifestWSConfig(
+      workspaces,
+      resolve4(projectRoot, "package.json")
+    ),
+    source: "package.json"
+  };
+};
+var splitNegatedPatterns = (all) => {
+  const patterns = [];
+  let ignore = [];
+  for (const orig of all) {
+    const excl = /^!+/.exec(orig);
+    const stripped = excl ? orig.slice(excl[0].length) : orig;
+    const pattern = stripped.replace(/^\.?\/+/, "");
+    if (excl && excl[0].length % 2 === 1) {
+      ignore.push(pattern);
+      continue;
+    }
+    ignore = ignore.filter((ign) => !minimatch(pattern, ign));
+    patterns.push(pattern);
+  }
+  return { patterns, ignore };
+};
 var Monorepo = class _Monorepo {
   /** The project root where vlt.json is found */
   projectRoot;
@@ -5795,9 +5850,9 @@ var Monorepo = class _Monorepo {
     if (options.load) this.load(options.load);
   }
   /**
-   * Load the workspace definitions from vlt.json,
-   * canonicalizing the result into the effective `{[group:string]:string[]}`
-   * form.
+   * Load the workspace definitions from vlt.json, or from the root
+   * package.json when vlt.json declares none, canonicalizing the result
+   * into the effective `{[group:string]:string[]}` form.
    *
    * Eg:
    * - `"src/*"` => `{packages:["src/*"]}`
@@ -5805,9 +5860,10 @@ var Monorepo = class _Monorepo {
    */
   get config() {
     if (this.#config) return this.#config;
-    this.#config = asWSConfig(
-      load("workspaces", assertWSConfig) ?? {}
-    );
+    this.#config = resolveWSConfig(
+      this.projectRoot,
+      this.packageJson
+    ).config;
     return this.#config;
   }
   /**
@@ -5902,7 +5958,7 @@ var Monorepo = class _Monorepo {
   }
   // can't be cached, because it's dependent on the matches set
   // but still worthwhile to have it defined in one place
-  #globOptions(matches, parseErrors) {
+  #globOptions(matches, ignore, parseErrors) {
     const inMatches = (p) => {
       return !!p?.relativePosix() && (matches.has(p.relativePosix()) || inMatches(p.parent));
     };
@@ -5913,12 +5969,15 @@ var Monorepo = class _Monorepo {
       scurry: this.scurry,
       withFileTypes: false,
       ignore: {
-        childrenIgnored: (p) => basename2(p.relativePosix()) === "node_modules" || inMatches(p),
+        childrenIgnored: (p) => basename2(p.relativePosix()) === "node_modules" || // only prunes the subtree for a `!foo/**` style negation,
+        // matching npm -- a bare `!foo` still gets walked into
+        !!ignore?.childrenIgnored(p) || inMatches(p),
         // ignore if fails to load package.json
         ignored: (p) => {
           p.lstatSync();
           const rel = p.relativePosix();
           if (!rel) return true;
+          if (ignore?.ignored(p)) return true;
           const maybeDelete = [];
           for (const m of matches) {
             if (rel.startsWith(m + "/")) return true;
@@ -5946,10 +6005,21 @@ var Monorepo = class _Monorepo {
       }
     };
   }
+  // patterns are always an array: asWSConfig normalizes every
+  // WorkspaceConfig shape to string[], and the path filter is a Set
   #glob(pattern) {
+    const { patterns, ignore } = splitNegatedPatterns(pattern);
     const matches = /* @__PURE__ */ new Set();
+    if (!patterns.length) return matches;
     const parseErrors = /* @__PURE__ */ new Map();
-    ts(pattern, this.#globOptions(matches, parseErrors));
+    ts(
+      patterns,
+      this.#globOptions(
+        matches,
+        ignore.length ? new ot(ignore, {}) : void 0,
+        parseErrors
+      )
+    );
     for (const [rel, err] of parseErrors) {
       let isNested = false;
       for (const m of matches) {
@@ -5978,6 +6048,12 @@ var Monorepo = class _Monorepo {
    * This does *not* get the full set of dependencies, or expand any
    * `workspace:` dependencies that are not loaded.
    *
+   * Bare semver specs are matched by name, and linked only when the
+   * local workspace version satisfies the range -- the same test
+   * `@vltpkg/satisfies` applies at resolution time, so the two agree on
+   * which deps are local. Specs that aren't parseable ranges, such as
+   * dist-tags, still match by name alone.
+   *
    * Call with the `forceLoad` param set to `true` to attempt a full
    * load if any deps are not currently loaded.
    */
@@ -5994,15 +6070,20 @@ var Monorepo = class _Monorepo {
       const deps = manifest[depType];
       if (!deps) continue;
       for (const [dep, spec] of Object.entries(deps)) {
-        if (spec.startsWith("workspace:")) {
+        if (spec.startsWith("workspace:") || !spec.includes(":")) {
           let depWS = this.#workspaces.get(dep);
+          if (depWS && depWS.name !== dep) depWS = void 0;
           if (!depWS) {
             if (!forceLoad) continue;
             if (didForceLoad) continue;
             didForceLoad = true;
             this.load();
             depWS = this.#workspaces.get(dep);
-            if (!depWS) continue;
+            if (depWS?.name !== dep) continue;
+          }
+          const range2 = spec.includes(":") ? void 0 : parseRange(spec);
+          if (range2 && !satisfies(depWS.manifest.version ?? "", range2)) {
+            continue;
           }
           depWorkspaces.push(depWS);
         }
@@ -6142,13 +6223,20 @@ var Monorepo = class _Monorepo {
   }
   /**
    * Convenience method to instantiate and load in one call.
-   * Returns undefined if the project is not a monorepo workspaces
-   * root, otherwise returns the loaded Monorepo.
+   * Returns undefined if the project is not a monorepo workspaces root,
+   * meaning neither `vlt.json` nor the root `package.json` declares any
+   * workspaces. Otherwise returns the loaded Monorepo.
    */
   static maybeLoad(projectRoot, options = { load: {} }) {
-    const config = load("workspaces", assertWSConfig);
-    if (!config) return;
-    return new _Monorepo(projectRoot, { load: {}, ...options });
+    if (options.config) {
+      return new _Monorepo(projectRoot, { load: {}, ...options });
+    }
+    const { config, source } = resolveWSConfig(
+      projectRoot,
+      options.packageJson
+    );
+    if (!source) return;
+    return new _Monorepo(projectRoot, { load: {}, ...options, config });
   }
   /**
    * Convenience method to instantiate and load in one call.
@@ -6198,7 +6286,8 @@ export {
   PackageJson,
   minimatch,
   PathScurry,
-  asWSConfig,
   assertWSConfig,
+  resolveWSConfig,
+  splitNegatedPatterns,
   Monorepo
 };

package/{chunk-BHJT53TP.js → chunk-PDWPFR5T.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   Ze,
   ts
-} from "./chunk-VE6CCH33.js";
+} from "./chunk-Y5PA7DVK.js";
 
 // ../../node_modules/.vlt/~npm~rimraf@6.1.3/node_modules/rimraf/dist/esm/opt-arg.js
 var typeOrUndef = (val, t) => typeof val === "undefined" || typeof val === t;

package/{chunk-LKQ5R4VX.js → chunk-QETVMIIT.js}

@@ -11,18 +11,18 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   asUnknownSpecPrefix
-} from "./chunk-O44Z6MAV.js";
+} from "./chunk-D2LEK7VS.js";
 import {
   addKey,
   asDependency
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   joinDepIDTuple,
   splitDepID
-} from "./chunk-SYGF27W7.js";
+} from "./chunk-J3R4XWB3.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
+} from "./chunk-V7EQZOO5.js";
 
 // ../../src/cli-sdk/src/parse-add-remove-args.ts
 import { isAbsolute, relative, resolve } from "node:path";

package/{chunk-5PP77V44.js → chunk-QWJDHBV7.js}

@@ -16,10 +16,10 @@ import {
 } from "./chunk-ZWKI5OSF.js";
 import {
   minimatch
-} from "./chunk-6G7MTZGS.js";
+} from "./chunk-P4LLYWCG.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
+} from "./chunk-V7EQZOO5.js";
 import {
   parse,
   stringify
@@ -770,7 +770,8 @@ var packTarball = async (manifest, dir, config) => {
       files,
       integrity,
       shasum,
-      resolvedManifest: processedManifest
+      resolvedManifest: processedManifest,
+      packDir
     };
   } finally {
     config.options.packageJson.write(packDir, manifest);

package/{chunk-G5BSQ6DP.js → chunk-RH2Y7MPW.js}

@@ -1949,6 +1949,25 @@ var isBoolean = (value) => typeof value === "boolean";
 var integrityRE = /^sha512-[a-zA-Z0-9/+]{86}==$/;
 var isIntegrity = (i) => typeof i === "string" && integrityRE.test(i);
 var integrityHex = (i) => isIntegrity(i) ? Buffer.from(i.slice(7), "base64").toString("hex") : void 0;
+var BROTLI_TARBALL_EXT = ".tar.br";
+var tarballFormat = (url) => {
+  const end = /[?#]/.exec(url)?.index ?? url.length;
+  return url.endsWith(BROTLI_TARBALL_EXT, end) ? "brotli" : void 0;
+};
+var brotliTarballName = (tgz) => tgz.replace(/\.tgz$/, BROTLI_TARBALL_EXT);
+var brotliTarballUrl = (tarball, alternates) => {
+  if (!tarball) return void 0;
+  const entry = alternates?.find(
+    (a) => a.kind === "tar.br" && !!a.tarball
+  );
+  if (!entry) return void 0;
+  try {
+    const href = new URL(entry.tarball, tarball).href;
+    return href === new URL(brotliTarballName(tarball)).href ? href : void 0;
+  } catch {
+    return void 0;
+  }
+};
 var asError = (er, fallbackMessage = "Unknown error") => er instanceof Error ? er : new Error(String(er) || fallbackMessage);
 var isError = (er) => er instanceof Error;
 var isErrorWithCause = (er) => isError(er) && "cause" in er;
@@ -2514,6 +2533,9 @@ export {
   normalizeBinPaths,
   integrityRE,
   integrityHex,
+  tarballFormat,
+  brotliTarballName,
+  brotliTarballUrl,
   asError,
   isError,
   isErrorWithCause,

package/{chunk-5YB6UIC3.js → chunk-SVMH3NDM.js}

@@ -20,15 +20,15 @@ import {
   pickManifest,
   resolve,
   revs
-} from "./chunk-6G7MTZGS.js";
+} from "./chunk-P4LLYWCG.js";
 import {
   Spec
-} from "./chunk-G5NJ7CYI.js";
+} from "./chunk-V7EQZOO5.js";
 import {
   registryErrorMessage,
   storeRoot,
   tokenRefusalAdvice
-} from "./chunk-UQUIO7LW.js";
+} from "./chunk-ZNUXDX6R.js";
 import {
   logRequest
 } from "./chunk-U7TEQCBN.js";
@@ -37,8 +37,10 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   asPackument,
-  integrityHex
-} from "./chunk-G5BSQ6DP.js";
+  brotliTarballUrl,
+  integrityHex,
+  tarballFormat
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -204,7 +206,7 @@ var PackageInfoClient = class {
   #tarPoolPromise;
   async getRegistryClient() {
     if (this.#registryClient) return this.#registryClient;
-    this.#registryClientPromise ??= import("./src-2BUT4WYP.js").then(({ RegistryClient }) => {
+    this.#registryClientPromise ??= import("./src-Z44JKVWS.js").then(({ RegistryClient }) => {
       this.#registryClient = new RegistryClient(this.options);
       return this.#registryClient;
     });
@@ -244,7 +246,7 @@ var PackageInfoClient = class {
   }
   async getTarPool() {
     if (this.#tarPool) return this.#tarPool;
-    this.#tarPoolPromise ??= import("./src-OKMGXMAD.js").then(
+    this.#tarPoolPromise ??= import("./src-T5FBZFMV.js").then(
       ({ Pool }) => {
         this.#tarPool = new Pool();
         return this.#tarPool;
@@ -252,6 +254,17 @@ var PackageInfoClient = class {
     );
     return this.#tarPoolPromise;
   }
+  /**
+   * The absolute URL of a version's Brotli (`.tar.br`) tarball, or
+   * undefined when the registry advertised none, advertised one this
+   * client does not use (see {@link brotliTarballUrl}), or
+   * `--no-brotli-tarballs` is set. `dist.tarball` is already absolute
+   * here -- see `absolutizeTarballs`.
+   */
+  #brotliTarball(tarball, alternates) {
+    if (this.options["brotli-tarballs"] === false) return void 0;
+    return brotliTarballUrl(tarball, alternates);
+  }
   constructor(options = {}) {
     this.options = options;
     this.#projectRoot = options.projectRoot || process.cwd();
@@ -286,8 +299,13 @@ var PackageInfoClient = class {
       installScripts = false
     } = options;
     const f = spec.final;
-    const alreadyResolved = !!(integrity && resolved);
-    const r = alreadyResolved ? { resolved, integrity, spec } : await this.resolve(spec, options);
+    const brotli = !!resolved && tarballFormat(resolved) === "brotli";
+    const r = resolved && (integrity || brotli) ? {
+      resolved,
+      integrity,
+      spec,
+      ...brotli && !integrity ? { digestRequired: true } : {}
+    } : await this.resolve(spec, options);
     switch (f.type) {
       case "git": {
         const {
@@ -322,6 +340,7 @@ var PackageInfoClient = class {
       }
       case "registry": {
         const pool = await this.getTarPool();
+        const format = tarballFormat(r.resolved);
         const hex = f.type === "registry" && this.#storeLinker !== "unpack" ? integrityHex(r.integrity) : void 0;
         const copy = this.#storeLinker === "copy" || installScripts;
         if (hex) {
@@ -353,7 +372,7 @@ var PackageInfoClient = class {
         });
         if (cached) {
           try {
-            await pool.unpack(cached.body, target);
+            await pool.unpack(cached.body, target, format);
             logRequest(r.resolved, "cache");
             r.integrity ??= cached.integrity;
             if (hex || cached.gzip) {
@@ -387,7 +406,8 @@ var PackageInfoClient = class {
               }
             );
           }
-          if (!trustIntegrity && response.checkIntegrity({ spec, url: resolved })) {
+          const verified = !trustIntegrity && response.checkIntegrity({ spec, url: resolved });
+          if (verified) {
             this.#trustedIntegrities.set(
               r.resolved,
               response.integrity
@@ -395,7 +415,7 @@ var PackageInfoClient = class {
           }
           const buf2 = response.buffer();
           if (r.integrity) {
-            if (!fromLockfile && !response.fromCache) {
+            if (!verified && !fromLockfile && !response.fromCache) {
               const hash = createHash("sha512");
               hash.update(buf2);
               const computed = `sha512-${hash.digest("base64")}`;
@@ -427,7 +447,7 @@ var PackageInfoClient = class {
           }
         }
         try {
-          await (await this.getTarPool()).unpack(buf, target);
+          await pool.unpack(buf, target, format);
         } catch (er) {
           throw this.#resolveError(
             spec,
@@ -627,11 +647,12 @@ var PackageInfoClient = class {
               { response, url: tarball }
             );
           }
-          if (!trustIntegrity && response.checkIntegrity({ spec, url: tarball })) {
+          const verified = !trustIntegrity && response.checkIntegrity({ spec, url: tarball });
+          if (verified) {
             this.#trustedIntegrities.set(tarball, response.integrity);
           }
           const buf = response.buffer();
-          if (integrity && !response.fromCache) {
+          if (integrity && !verified && !response.fromCache) {
             const hash = createHash("sha512");
             hash.update(buf);
             const computed = `sha512-${hash.digest("base64")}`;
@@ -1027,15 +1048,11 @@ var PackageInfoClient = class {
       case "registry": {
         const mani = await this.manifest(spec, options);
         if (mani.dist) {
-          const { integrity, tarball, signatures } = mani.dist;
+          const { integrity, tarball, signatures, alternates } = mani.dist;
           if (tarball) {
-            const r = {
-              resolved: tarball,
-              integrity,
-              signatures,
-              spec
-            };
-            if (!integrity && this.#vltPackuments.has(`${f.registry}${f.name}`)) {
+            const brotli = this.#brotliTarball(tarball, alternates);
+            const r = brotli ? { resolved: brotli, spec, digestRequired: true } : { resolved: tarball, integrity, signatures, spec };
+            if (!brotli && !integrity && this.#vltPackuments.has(`${f.registry}${f.name}`)) {
               r.digestRequired = true;
             }
             this.#resolutions.set(memoKey, r);

package/{chunk-NJZSCUD4.js → chunk-TYLYZKVA.js}

@@ -12,15 +12,16 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   init,
   install
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   commandUsage
-} from "./chunk-55DYW2MP.js";
+} from "./chunk-I6QGYSB4.js";
 import {
-  asWSConfig,
   assertWSConfig,
-  minimatch
-} from "./chunk-6G7MTZGS.js";
+  minimatch,
+  resolveWSConfig,
+  splitNegatedPatterns
+} from "./chunk-P4LLYWCG.js";
 import {
   load,
   save
@@ -74,8 +75,11 @@ Modify/add properties using \`vlt pkg\`. For example:
 var command = async (conf) => {
   const allowScripts = conf.get("allow-scripts") ? String(conf.get("allow-scripts")) : ":not(*)";
   if (conf.values.workspace?.length) {
-    const workspacesConfig = load("workspaces", assertWSConfig);
-    const parsedWSConfig = asWSConfig(workspacesConfig ?? {});
+    const { config: parsedWSConfig, source } = resolveWSConfig(
+      conf.options.projectRoot,
+      conf.options.packageJson
+    );
+    const workspacesConfig = load("workspaces", assertWSConfig) ?? (source === "package.json" ? Object.values(parsedWSConfig).flat() : void 0);
     const results = [];
     const addToConfig = [];
     for (const workspace of conf.values.workspace) {
@@ -83,10 +87,9 @@ var command = async (conf) => {
       mkdirSync(cwd, { recursive: true });
       results.push(await init({ cwd }));
       const isMatched = Object.values(parsedWSConfig).some(
-        (patterns) => {
-          return patterns.some(
-            (pattern) => minimatch(workspace, pattern)
-          );
+        (group) => {
+          const { patterns, ignore } = splitNegatedPatterns(group);
+          return patterns.some((pattern) => minimatch(workspace, pattern)) && !ignore.some((pattern) => minimatch(workspace, pattern));
         }
       );
       if (!isMatched) {

package/{chunk-G5NJ7CYI.js → chunk-V7EQZOO5.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   Spec,
   kCustomInspect
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 
 // ../../src/spec/src/index.ts
 import { homedir } from "node:os";

package/{chunk-JTUZP2OD.js → chunk-VBADA6QU.js}

@@ -14,7 +14,7 @@ var require = _vlt_createRequire(import.meta.filename);
 var package_default = {
   name: "@vltpkg/user-agent",
   description: "The User-Agent string that vlt sends with every outbound request",
-  version: "1.2.0",
+  version: "1.3.0",
   repository: {
     type: "git",
     url: "git+https://github.com/vltpkg/vltpkg.git",

package/{chunk-FSZF2RSQ.js → chunk-W6UMN2YJ.js}

@@ -11,19 +11,19 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   openUrl
-} from "./chunk-3CUFJPBK.js";
+} from "./chunk-HCZOVC3Y.js";
 import {
   stderr
-} from "./chunk-UNWQVOLY.js";
+} from "./chunk-MJWUULO6.js";
 import {
   mermaidOutput
-} from "./chunk-B2FK2HHL.js";
+} from "./chunk-J2WL3A3C.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
 import {
   getTokenByURL
-} from "./chunk-OE6VHHN4.js";
+} from "./chunk-FHMIECHI.js";
 
 // ../../src/cli-sdk/src/query-auth.ts
 var createGetAuthHeader = (conf) => async (url) => getTokenByURL(url, conf.options.identity);

package/{chunk-VE6CCH33.js → chunk-Y5PA7DVK.js}

@@ -2995,6 +2995,7 @@ var Ze = Object.assign(Je, { glob: Je, globSync: ts, sync: Ui, globStream: Qe, s
 Ze.glob = Ze;
 
 export {
+  ot,
   ts,
   Ze
 };

package/{chunk-5BD4QGW2.js → chunk-YZWFWSY7.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-5YB6UIC3.js";
+} from "./chunk-SVMH3NDM.js";
 import {
   Monorepo,
   PackageJson,
   PathScurry
-} from "./chunk-6G7MTZGS.js";
+} from "./chunk-P4LLYWCG.js";
 import {
   resetCaches
-} from "./chunk-SYGF27W7.js";
+} from "./chunk-J3R4XWB3.js";
 import {
   commands,
   defaultValues,
@@ -28,7 +28,7 @@ import {
   isRecordField,
   recordFields,
   storeLinkers
-} from "./chunk-6A3XS52F.js";
+} from "./chunk-ENSGPOLR.js";
 import {
   find,
   load,
@@ -37,14 +37,14 @@ import {
 } from "./chunk-HTOTG4TS.js";
 import {
   storeRoot
-} from "./chunk-UQUIO7LW.js";
+} from "./chunk-ZNUXDX6R.js";
 import {
   assertRecordStringString,
   assertRecordStringT,
   getOptions,
   isObject,
   isRecordStringString
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-UQUIO7LW.js → chunk-ZNUXDX6R.js}

@@ -12,13 +12,13 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   asError,
   isObject
-} from "./chunk-G5BSQ6DP.js";
+} from "./chunk-RH2Y7MPW.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
 
 // ../../src/registry-client/src/registry-error.ts
-import { STATUS_CODES } from "node:http";
+var statusText = (code) => process.getBuiltinModule("node:http").STATUS_CODES[code];
 var MAX_DETAIL_LENGTH = 512;
 var truncate = (s) => s.length <= MAX_DETAIL_LENGTH ? s : `${s.slice(0, MAX_DETAIL_LENGTH - 1)}\u2026`;
 var isHTML = (s) => /^\s*(<!doctype\s+html|<html\b)/i.test(s);
@@ -42,7 +42,7 @@ var detailFromJSON = (text) => {
   return void 0;
 };
 var registryErrorMessage = (response) => {
-  const statusMessage = STATUS_CODES[response.statusCode];
+  const statusMessage = statusText(response.statusCode);
   const status = `${response.statusCode}${statusMessage ? ` ${statusMessage}` : ""}`;
   let text;
   try {
@@ -161,6 +161,7 @@ import { resolve } from "node:path";
 var storeRoot = (cache) => resolve(cache, "store", "v1");
 
 export {
+  statusText,
   registryErrorMessage,
   tokenRefusal,
   tokenRefusalAdvice,