@vltpkg/cli-js 1.3.1 → 1.3.3

package/{access-ATF2FQHI.js → access-KMBBQIIT.js}

@@ -19,12 +19,12 @@ import "./chunk-64VFL4WI.js";
 import "./chunk-ENSGPOLR.js";
 import {
   RegistryClient
-} from "./chunk-P6LBJWJN.js";
+} from "./chunk-SH24EMXO.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
 } from "./chunk-PBBULTAG.js";
-import "./chunk-LCAH3OGR.js";
+import "./chunk-YU2W5UPG.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";

package/{bugs-P26XZBIE.js → bugs-CABZX76X.js}

@@ -17,24 +17,24 @@ import {
 } from "./chunk-MC6CESRA.js";
 import {
   createHostContextsMap
-} from "./chunk-YL5D7SKZ.js";
+} from "./chunk-LY5FNWRY.js";
 import "./chunk-CSZTT7QN.js";
 import "./chunk-CU752KW7.js";
 import "./chunk-G2YT2GWF.js";
 import "./chunk-CRGWLUGC.js";
 import {
   PackageInfoClient
-} from "./chunk-QXKWSPKX.js";
+} from "./chunk-MOL2DUEQ.js";
 import "./chunk-ZWKI5OSF.js";
 import "./chunk-WGDTG44V.js";
 import "./chunk-J4NHRZX6.js";
 import {
   Query,
   actual
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   SecurityArchive
-} from "./chunk-U3WCCLFD.js";
+} from "./chunk-DCFLXO2M.js";
 import {
   commandUsage
 } from "./chunk-I6QGYSB4.js";
@@ -48,7 +48,7 @@ import "./chunk-ENSGPOLR.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-APMYKJI2.js";
 import "./chunk-PBBULTAG.js";
-import "./chunk-LCAH3OGR.js";
+import "./chunk-YU2W5UPG.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";

package/{build-UABOHT3O.js → build-WNHKYA4E.js}

@@ -11,8 +11,8 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-3WBHQEWL.js";
-import "./chunk-U3WCCLFD.js";
+} from "./chunk-ZRRNOLEG.js";
+import "./chunk-DCFLXO2M.js";
 import {
   commandUsage
 } from "./chunk-I6QGYSB4.js";
@@ -21,7 +21,7 @@ import "./chunk-JIQBZ2UT.js";
 import "./chunk-64VFL4WI.js";
 import "./chunk-ENSGPOLR.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-LCAH3OGR.js";
+import "./chunk-YU2W5UPG.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";

package/{cache-R2SEGAZJ.js → cache-KKT4GIYD.js}

@@ -34,12 +34,12 @@ import {
 import "./chunk-ENSGPOLR.js";
 import {
   CacheEntry
-} from "./chunk-P6LBJWJN.js";
+} from "./chunk-SH24EMXO.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
 } from "./chunk-PBBULTAG.js";
-import "./chunk-LCAH3OGR.js";
+import "./chunk-YU2W5UPG.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import {

package/{chunk-73YPXX6C.js → chunk-3IDIPSH7.js}

@@ -15,7 +15,7 @@ import {
 import {
   addKey,
   asDependency
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   joinDepIDTuple,
   splitDepID

package/chunk-7JK53T6G.js

@@ -0,0 +1,75 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+import {
+  error
+} from "./chunk-WZWDS3W4.js";
+import {
+  __glob
+} from "./chunk-PZLD7RTK.js";
+
+// import("./commands/**/*.ts") in ../../src/cli-sdk/src/load-command.ts
+var globImport_commands_ts = __glob({
+  "./commands/access.ts": () => import("./access-KMBBQIIT.js"),
+  "./commands/bugs.ts": () => import("./bugs-CABZX76X.js"),
+  "./commands/build.ts": () => import("./build-WNHKYA4E.js"),
+  "./commands/cache.ts": () => import("./cache-KKT4GIYD.js"),
+  "./commands/ci.ts": () => import("./ci-BGVGC5RF.js"),
+  "./commands/config.ts": () => import("./config-FIKZ4VWG.js"),
+  "./commands/create.ts": () => import("./create-CHTG7KO3.js"),
+  "./commands/deprecate.ts": () => import("./deprecate-W7KQ62HF.js"),
+  "./commands/dist-tag.ts": () => import("./dist-tag-66CC6HT7.js"),
+  "./commands/docs.ts": () => import("./docs-HW4U5TGD.js"),
+  "./commands/exec-cache.ts": () => import("./exec-cache-L3ONPM5C.js"),
+  "./commands/exec-local.ts": () => import("./exec-local-NR3RYQDQ.js"),
+  "./commands/exec.ts": () => import("./exec-BVVNAGFI.js"),
+  "./commands/help.ts": () => import("./help-5YL6SUAN.js"),
+  "./commands/init.ts": () => import("./init-RI2WVCGL.js"),
+  "./commands/install.ts": () => import("./install-OWAI4EOW.js"),
+  "./commands/install/reporter.ts": () => import("./reporter-XBHCUW7W.js"),
+  "./commands/list.ts": () => import("./list-4ZFX7ANG.js"),
+  "./commands/login.ts": () => import("./login-6TL3EE6Q.js"),
+  "./commands/logout.ts": () => import("./logout-VQWHVHBE.js"),
+  "./commands/pack.ts": () => import("./pack-Q5IRRAMU.js"),
+  "./commands/ping.ts": () => import("./ping-2WV3V7GB.js"),
+  "./commands/pkg.ts": () => import("./pkg-RXB6BRS5.js"),
+  "./commands/profile.ts": () => import("./profile-GNGWS5H2.js"),
+  "./commands/publish.ts": () => import("./publish-PI74W4GH.js"),
+  "./commands/query.ts": () => import("./query-NESDWXGE.js"),
+  "./commands/registry.ts": () => import("./registry-MXAA4HVJ.js"),
+  "./commands/repo.ts": () => import("./repo-PPBN3SKP.js"),
+  "./commands/run-exec.ts": () => import("./run-exec-VLSH5SOB.js"),
+  "./commands/run.ts": () => import("./run-7GTWIFMV.js"),
+  "./commands/setup.ts": () => import("./setup-6O7RFGU2.js"),
+  "./commands/token.ts": () => import("./token-NZ4HODXE.js"),
+  "./commands/uninstall.ts": () => import("./uninstall-KBZ6PJBG.js"),
+  "./commands/unpublish.ts": () => import("./unpublish-JBWSIBRX.js"),
+  "./commands/update.ts": () => import("./update-X4EC6MPP.js"),
+  "./commands/version.ts": () => import("./version-QEHPAFAE.js"),
+  "./commands/view.ts": () => import("./view-WGGZTYAT.js"),
+  "./commands/whoami.ts": () => import("./whoami-RYNXOULV.js")
+});
+
+// ../../src/cli-sdk/src/load-command.ts
+var loadCommand = async (command) => {
+  try {
+    return await globImport_commands_ts(`./commands/${command}.ts`);
+  } catch (e) {
+    throw error("Could not load command", {
+      found: command,
+      cause: e
+    });
+  }
+};
+
+export {
+  loadCommand
+};

package/{chunk-U3WCCLFD.js → chunk-DCFLXO2M.js}

@@ -16,7 +16,7 @@ import {
 } from "./chunk-JIQBZ2UT.js";
 import {
   userAgent
-} from "./chunk-LCAH3OGR.js";
+} from "./chunk-YU2W5UPG.js";
 import {
   I
 } from "./chunk-U7TEQCBN.js";

package/{chunk-KPMPYRBZ.js → chunk-GA4LA6B2.js}

@@ -17,13 +17,13 @@ import {
 } from "./chunk-CSZTT7QN.js";
 import {
   mermaidOutput
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
 import {
   getTokenByURL
-} from "./chunk-P6LBJWJN.js";
+} from "./chunk-SH24EMXO.js";
 
 // ../../src/cli-sdk/src/query-auth.ts
 var createGetAuthHeader = (conf) => async (url) => getTokenByURL(url, conf.options.identity);

package/{chunk-ZPVVD6CI.js → chunk-GZWJAGBL.js}

@@ -11,7 +11,7 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-QXKWSPKX.js";
+} from "./chunk-MOL2DUEQ.js";
 import {
   Monorepo,
   PackageJson,

package/{chunk-OOYLF23O.js → chunk-HCMAX6Q5.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   init,
   install
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   commandUsage
 } from "./chunk-I6QGYSB4.js";

package/{chunk-YL5D7SKZ.js → chunk-LY5FNWRY.js}

@@ -13,10 +13,10 @@ import {
   actual,
   callLimit,
   createVirtualRoot
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   SecurityArchive
-} from "./chunk-U3WCCLFD.js";
+} from "./chunk-DCFLXO2M.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -140,7 +140,7 @@ var reloadConfig = async (folder) => {
     unload("project");
   } catch {
   }
-  const { Config } = await import("./config-4SAA7FD2.js");
+  const { Config } = await import("./config-AWX2VEKL.js");
   return Config.load(folder, process.argv, true);
 };
 

package/{chunk-QXKWSPKX.js → chunk-MOL2DUEQ.js}

@@ -145,13 +145,15 @@ var debug = debuglog("vlt");
 var xdg = new XDG("vlt");
 var delimiter = "~";
 var VLT_PACKUMENT_MIME = "application/vnd.vlt.packument-v1+json";
-var PACKUMENT_ACCEPT = `${VLT_PACKUMENT_MIME}; q=1.0, application/json; q=0.8, */*; q=0.1`;
+var VLT_PACKUMENT_V2_MIME = "application/vnd.vlt.packument-v2+json";
+var PACKUMENT_ACCEPT = `${VLT_PACKUMENT_V2_MIME}; q=1.0, ${VLT_PACKUMENT_MIME}; q=0.9, application/json; q=0.8, */*; q=0.1`;
 var manifestCacheMaxAge = 5 * 60 * 1e3;
 var noRegistryError = (spec) => error(
   'No registry configured to resolve this spec. Set "registry" in vlt.json, pass --registry, or run `vlt login --registry=<url>`. See https://docs.vlt.sh/cli',
   { code: "ECONFIG", spec }
 );
 var isMovingSelector = (f) => !!(f.distTag || f.range?.isAny);
+var revalidateMode = (f, options) => !isMovingSelector(f) ? void 0 : options.backgroundRevalidate ? "background" : true;
 var isStableSelector = (f) => {
   const { range } = f;
   if (!range) return false;
@@ -167,7 +169,7 @@ var PackageInfoClient = class {
   packageJson;
   monorepo;
   #trustedIntegrities = /* @__PURE__ */ new Map();
-  // `${registry}${name}` of every packument served as VLT_PACKUMENT_MIME
+  // `${registry}${name}` of every packument served as a vlt packument type
   #vltPackuments = /* @__PURE__ */ new Set();
   #manifestCacheMinAge = Date.now() - manifestCacheMaxAge;
   #cachePath;
@@ -190,8 +192,8 @@ var PackageInfoClient = class {
   // In-flight coalescing key is `${registry}${name}` — no representation
   // component. Safe only because every caller requests the same full
   // packument (see #fetchPackument). The one thing that does vary per
-  // caller is forceRevalidate, so record it and let a moving selector
-  // reuse a forced promise but never a non-forced one (see packument()).
+  // caller is forceRevalidate, so record how hard it revalidates and
+  // never let a request ride a weaker one (see #packument()).
   #packumentPromises = /* @__PURE__ */ new Map();
   // unique temp file names for atomic manifest cache writes
   #manifestWriteRandom = randomBytes(6).toString("hex");
@@ -206,7 +208,7 @@ var PackageInfoClient = class {
   #tarPoolPromise;
   async getRegistryClient() {
     if (this.#registryClient) return this.#registryClient;
-    this.#registryClientPromise ??= import("./src-PKFKIVVK.js").then(({ RegistryClient }) => {
+    this.#registryClientPromise ??= import("./src-U4MCZFJT.js").then(({ RegistryClient }) => {
       this.#registryClient = new RegistryClient(this.options);
       return this.#registryClient;
     });
@@ -947,19 +949,19 @@ var PackageInfoClient = class {
           );
         const fullKey = `${registry}${name}`;
         const packumentKey = stable ? `${fullKey}?stable` : fullKey;
-        const forced = isMovingSelector(f);
+        const mode = revalidateMode(f, options);
+        const rank = mode === true ? 2 : mode ? 1 : 0;
         const inflight = this.#packumentPromises.get(packumentKey) ?? // the full packument is a superset of the stable one, so an
         // in-flight full request answers a stable ask too, and a package
         // wanted both ways is still fetched once
         (stable ? this.#packumentPromises.get(fullKey) : void 0);
-        if (inflight && (!forced || inflight.forced))
-          return inflight.promise;
+        if (inflight && inflight.rank >= rank) return inflight.promise;
         const pakuURL = new URL(
           stable ? `${name}?stable` : name,
           registry
         );
         const promise = this.#fetchPackument(spec, options, pakuURL);
-        const record = { promise, forced };
+        const record = { promise, rank };
         this.#packumentPromises.set(packumentKey, record);
         const clear = () => {
           if (this.#packumentPromises.get(packumentKey) === record) {
@@ -972,15 +974,17 @@ var PackageInfoClient = class {
     }
   }
   async #fetchPackument(spec, options, pakuURL, useCache) {
+    const mode = revalidateMode(spec.final, options);
     const response = await (await this.getRegistryClient()).request(pakuURL, {
       headers: {
         accept: options.full ? "application/json" : PACKUMENT_ACCEPT
       },
       ...useCache === false || options.full ? { useCache: false } : {},
-      // costs a conditional GET per moving selector on an otherwise warm
-      // cache, install included. 304s are cheap but not free; the
-      // alternative is serving a dist tag that moved (#1656).
-      ...isMovingSelector(spec.final) ? { forceRevalidate: true } : {}
+      // a moving selector pays a conditional GET before use, so a moved
+      // dist tag is seen at once (#1656). with backgroundRevalidate a
+      // packument still within max-age is served and revalidated after
+      // exit instead.
+      ...mode === void 0 ? {} : { forceRevalidate: mode }
     });
     if (response.statusCode !== 200) {
       throw this.#resolveError(
@@ -1003,10 +1007,15 @@ var PackageInfoClient = class {
       throw er;
     }
     const { registry, name } = spec.final;
-    if (response.contentType.startsWith(VLT_PACKUMENT_MIME)) {
+    const { contentType } = response;
+    const v2 = contentType.startsWith(VLT_PACKUMENT_V2_MIME);
+    if (v2 || contentType.startsWith(VLT_PACKUMENT_MIME)) {
       this.#vltPackuments.add(`${registry}${name}`);
     }
-    if (registry) absolutizeTarballs(paku, registry);
+    if (registry) {
+      const base = registry.endsWith("/") ? registry : registry + "/";
+      absolutizeTarballs(paku, v2 ? `${base}${name}/-/` : base);
+    }
     return paku;
   }
   async resolve(spec, options = {}) {
@@ -1169,8 +1178,7 @@ var PackageInfoClient = class {
     return er;
   }
 };
-var absolutizeTarballs = (paku, registry) => {
-  const base = registry.endsWith("/") ? registry : registry + "/";
+var absolutizeTarballs = (paku, base) => {
   for (const { dist } of Object.values(paku.versions)) {
     const tarball = dist?.tarball;
     if (tarball && !/^[a-z][a-z0-9+.-]*:/i.test(tarball)) {

package/{chunk-OKJ4U3PP.js → chunk-QBXGMTDE.js}

@@ -9,17 +9,22 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
+import {
+  XDG
+} from "./chunk-XNLSTHDK.js";
 
 // ../build/src/bins.ts
 import module from "node:module";
 import { resolve } from "node:path";
-module.enableCompileCache();
+if (module.enableCompileCache().status === module.constants.compileCacheStatus.FAILED) {
+  module.enableCompileCache(new XDG("vlt").cache("compile-cache"));
+}
 var BINS_DIR = resolve(import.meta.dirname, "bins");
 var run = async (command) => {
   if (command) {
     process.argv.splice(2, 0, command);
   }
-  const vlt = await import("./src-N3QY4ITW.js");
+  const vlt = await import("./src-6E7KCC7J.js");
   await vlt.default();
 };
 

package/{chunk-2QA7DUYM.js → chunk-ROCFQPP2.js}

@@ -15,7 +15,7 @@ import {
   pairsToRecords,
   registrySelectionFields,
   registrySelectors
-} from "./chunk-ZPVVD6CI.js";
+} from "./chunk-GZWJAGBL.js";
 import {
   normalizeRegistryURL
 } from "./chunk-J4NHRZX6.js";

package/{chunk-P6LBJWJN.js → chunk-SH24EMXO.js}

@@ -21,7 +21,7 @@ import {
 } from "./chunk-PBBULTAG.js";
 import {
   userAgent
-} from "./chunk-LCAH3OGR.js";
+} from "./chunk-YU2W5UPG.js";
 import {
   I,
   logRequest
@@ -26739,6 +26739,12 @@ var CacheEntry = class _CacheEntry {
    */
   setHeader(h, value) {
     this.#headers = setRawHeader(this.#headers, h, value);
+    if (h.toLowerCase() === "date") {
+      this.#date = void 0;
+      this.#valid = void 0;
+      this.#validUntil = void 0;
+      this.#staleUntil = void 0;
+    }
   }
   /**
    * Remove a header, if present
@@ -27898,7 +27904,15 @@ var RegistryClient = class {
     const key = cacheKey(method, u);
     const buffer = useCache ? await this.cache.fetch(key, { context: { integrity } }) : void 0;
     const entry = buffer ? this.#decodeCached(buffer) : void 0;
-    if (entry?.valid && !forceRevalidate) {
+    if (entry?.valid && forceRevalidate !== true) {
+      if (forceRevalidate === "background" && m) {
+        register2(
+          dirname3(this.cache.path()),
+          m,
+          url,
+          getHeader(options.headers, "accept")
+        );
+      }
       logRequest(url, "cache", { method });
       return entry;
     }
@@ -27993,16 +28007,15 @@ var RegistryClient = class {
     const clobbersCachedEntry = forceRevalidate && !!entry && result.statusCode !== 200;
     if (useCache && !clobbersCachedEntry) {
       const integrity2 = result.integrity ?? (result.statusCode === 200 && !result.isJSON ? result.integrityActual : void 0);
-      const buffer2 = result.encode();
-      this.cache.set(
-        key,
-        Buffer.from(
-          buffer2.buffer,
-          buffer2.byteOffset,
-          buffer2.byteLength
-        ),
-        { integrity: integrity2 }
+      const encoded = result.encode();
+      const stored = Buffer.from(
+        encoded.buffer,
+        encoded.byteOffset,
+        encoded.byteLength
       );
+      this.cache.set(key, stored, { integrity: integrity2 });
+      if (result === entry && entry.isJSON)
+        this.#decoded.set(stored, entry);
     }
     return result;
   }

package/{chunk-B7YWFGLB.js → chunk-TJBBYDUN.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-RIYFGX27.js";
 import {
   createHostContextsMap
-} from "./chunk-YL5D7SKZ.js";
+} from "./chunk-LY5FNWRY.js";
 import {
   stderr,
   stdout,
@@ -27,7 +27,7 @@ import {
   Query,
   actual,
   isRunResult
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   Monorepo
 } from "./chunk-BUKZHMMK.js";

package/{chunk-LCAH3OGR.js → chunk-YU2W5UPG.js}

@@ -14,7 +14,7 @@ var require = _vlt_createRequire(import.meta.filename);
 var package_default = {
   name: "@vltpkg/user-agent",
   description: "The User-Agent string that vlt sends with every outbound request",
-  version: "1.3.1",
+  version: "1.3.3",
   repository: {
     type: "git",
     url: "git+https://github.com/vltpkg/vltpkg.git",

package/{chunk-7AYULBUY.js → chunk-ZBJRZXSU.js}

@@ -11,11 +11,11 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-QXKWSPKX.js";
+} from "./chunk-MOL2DUEQ.js";
 import {
   findCmdShimIfExists,
   install
-} from "./chunk-3WBHQEWL.js";
+} from "./chunk-ZRRNOLEG.js";
 import {
   PathScurry
 } from "./chunk-BUKZHMMK.js";