@vltpkg/cli-js 1.3.7 → 1.4.0

package/{access-4W6PMOGC.js → access-422UGEWN.js}

@@ -11,25 +11,25 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   resolveRegistry
-} from "./chunk-A2TSRXZD.js";
+} from "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import {
   RegistryClient
-} from "./chunk-QVPNKMUU.js";
+} from "./chunk-OAJ3PO3Z.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-6D54UN4T.js";
-import "./chunk-VBDNOU76.js";
+} from "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-IBGFQR23.js";
+import "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{bugs-FJHQFPZF.js → bugs-RED7Y33Q.js}

@@ -14,46 +14,46 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   openUrl
-} from "./chunk-OWMR2EDW.js";
+} from "./chunk-TPRK6IDA.js";
 import {
   createHostContextsMap
-} from "./chunk-FKZ5I53D.js";
-import "./chunk-XDSZO74H.js";
-import "./chunk-KMOOTBHM.js";
+} from "./chunk-ASLX43R3.js";
+import "./chunk-FZUYGJZU.js";
+import "./chunk-QCSUWACA.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-IHXJVKAE.js";
+import "./chunk-5Y4SYLJ2.js";
 import {
   PackageInfoClient
-} from "./chunk-3D3IB4YN.js";
+} from "./chunk-TO23PR7J.js";
 import "./chunk-SRWDPPLX.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-A2TSRXZD.js";
+import "./chunk-THSYN5EK.js";
 import {
   Query,
   actual
-} from "./chunk-7BHHCB5C.js";
+} from "./chunk-OVPHE4O7.js";
 import {
   SecurityArchive
-} from "./chunk-OWUICQFY.js";
+} from "./chunk-5TNXLRW2.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-CB65DPZ2.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-I7UMHYZX.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-SV4WK3KX.js";
+import "./chunk-PLG3OYCX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-APMYKJI2.js";
-import "./chunk-6D54UN4T.js";
-import "./chunk-VBDNOU76.js";
+import "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-IBGFQR23.js";
+import "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{build-SPWU3NOH.js → build-IHMPBWRO.js}

@@ -11,24 +11,24 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-7BHHCB5C.js";
-import "./chunk-OWUICQFY.js";
+} from "./chunk-OVPHE4O7.js";
+import "./chunk-5TNXLRW2.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-CB65DPZ2.js";
-import "./chunk-SV4WK3KX.js";
-import "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-I7UMHYZX.js";
+import "./chunk-PLG3OYCX.js";
+import "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-VBDNOU76.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   isErrorWithCause
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{cache-SBNEPOMQ.js → cache-FJP2RZJX.js}

@@ -15,47 +15,48 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-XDSZO74H.js";
-import "./chunk-KMOOTBHM.js";
+} from "./chunk-FZUYGJZU.js";
+import "./chunk-QCSUWACA.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-IHXJVKAE.js";
+import "./chunk-5Y4SYLJ2.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-A2TSRXZD.js";
+import "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
+} from "./chunk-LHPEBLOU.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
-import "./chunk-SV4WK3KX.js";
+import "./chunk-PLG3OYCX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import {
   CacheEntry
-} from "./chunk-QVPNKMUU.js";
+} from "./chunk-OAJ3PO3Z.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-6D54UN4T.js";
-import "./chunk-VBDNOU76.js";
+} from "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import {
   readStoreIndex,
   removeStoreEntry,
   storeEntryCopied,
+  storeEntryLastCopied,
   storeEntryLinked,
   storeEntryNames,
   storeEntryTime,
   verifyStoreEntry
-} from "./chunk-H77JYU7F.js";
+} from "./chunk-DNRR3XMG.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   integrityHex
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -78,6 +79,7 @@ var CacheView = class extends ViewClass {
 var views = {
   human: CacheView
 };
+var pruneDays = 30;
 var usageDef = {
   command: "cache",
   usage: "<command> [flags]",
@@ -130,11 +132,14 @@ var usageDef = {
                     a file in \`node_modules\` was edited in place.`
     },
     "prune-store": {
-      usage: "",
+      usage: "[<date>]",
       description: `Remove global store entries that no \`node_modules\`
-                    folder links to. Entries ever copied from (install
-                    scripts, \`store-linker=copy\`, a cache on another
-                    drive) stay: copies do not show use.`
+                    folder links to. Copies do not show use: an entry
+                    copied or cloned from (install scripts,
+                    \`store-linker=copy\`, macOS, a cache on another
+                    drive) stays if that last happened after
+                    \`<date>\`, or in the last ${pruneDays} days
+                    without one.`
     }
   },
   examples: {
@@ -398,14 +403,21 @@ var verify = async (conf, specs, view2) => {
     ...!all && { missing }
   };
 };
-var pruneStore = async (conf, _, view2) => {
+var pruneStore = async (conf, args, view2) => {
+  const since = args.length ? new Date(args.join(" ")).getTime() : Date.now() - pruneDays * 24 * 60 * 60 * 1e3;
+  if (Number.isNaN(since)) {
+    throw error("Invalid date", {
+      code: "EUSAGE",
+      found: args.join(" ")
+    });
+  }
   const { storeRoot } = conf.options;
   const names = storeEntryNames(storeRoot);
   const removed = {};
   for (const hex of names) {
     const entry = resolve(storeRoot, hex);
     const index = readStoreIndex(entry);
-    if (storeEntryCopied(entry, index) || storeEntryLinked(entry, index)) {
+    if (storeEntryCopied(entry, index) && storeEntryLastCopied(entry) >= since || storeEntryLinked(entry, index)) {
       continue;
     }
     removeStoreEntry(entry);

package/cache-unzip-src-unzip.js

@@ -34,7 +34,27 @@ function syntaxError(message, cause, from) {
 }
 
 // ../../src/fast-split/src/index.ts
+var splitTwo = (str, delim) => {
+  const a = str.indexOf(delim);
+  return a === -1 ? [str] : [str.substring(0, a), str.substring(a + delim.length)];
+};
+var splitThree = (str, delim) => {
+  const a = str.indexOf(delim);
+  if (a === -1) return [str];
+  const l = delim.length;
+  const b = str.indexOf(delim, a + l);
+  return b === -1 ? [str.substring(0, a), str.substring(a + l)] : [
+    str.substring(0, a),
+    str.substring(a + l, b),
+    str.substring(b + l)
+  ];
+};
 function fastSplit(str, delim, limit = -1, onPart) {
+  if (onPart === void 0) {
+    if (limit === 2) return splitTwo(str, delim);
+    if (limit === 3)
+      return splitThree(str, delim);
+  }
   let i = 0;
   let p = 0;
   const l = delim.length;
@@ -7182,7 +7202,7 @@ import { join as join2 } from "node:path";
 import { performance as performance2 } from "node:perf_hooks";
 import { debuglog as debuglog3 } from "node:util";
 var debug3 = debuglog3("vlt");
-var linkers = /* @__PURE__ */ new Set(["auto", "hardlink", "copy"]);
+var linkers = /* @__PURE__ */ new Set(["auto", "hardlink", "clone", "copy"]);
 var storeEnabled = () => linkers.has(process.env.VLT_STORE_LINKER ?? "");
 var STALE_MS = 60 * 60 * 1e3;
 var parseConcurrency = (raw) => {

package/{chunk-SPWJ3X5Y.js → chunk-2AMOC4DN.js}

@@ -15,14 +15,14 @@ import {
   pairsToRecords,
   registrySelectionFields,
   registrySelectors
-} from "./chunk-L3K2ZAOO.js";
+} from "./chunk-5RHABCYI.js";
 import {
   normalizeRegistryURL
-} from "./chunk-A2TSRXZD.js";
+} from "./chunk-THSYN5EK.js";
 import {
   getCommand,
   isRecordField
-} from "./chunk-SE2FSMBR.js";
+} from "./chunk-WF6KLKRN.js";
 import {
   find
 } from "./chunk-HTOTG4TS.js";
@@ -33,7 +33,7 @@ import {
   defaultRegistries,
   defaultRegistryName,
   isObject
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-QYS5MGGM.js → chunk-4UCADW6S.js}

@@ -11,17 +11,19 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-3D3IB4YN.js";
+} from "./chunk-TO23PR7J.js";
 import {
+  RollbackRemove,
+  cmdShim,
   findCmdShimIfExists,
   install
-} from "./chunk-7BHHCB5C.js";
+} from "./chunk-OVPHE4O7.js";
 import {
   PathScurry
-} from "./chunk-CB65DPZ2.js";
+} from "./chunk-I7UMHYZX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
+} from "./chunk-5IJTPZXP.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
@@ -30,7 +32,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   parseScope
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -221,7 +223,7 @@ var vlxInstall = async (spec, options, promptFn) => {
 };
 
 // ../../src/vlx/src/resolve.ts
-import { resolve as resolve6 } from "node:path";
+import { resolve as resolve7 } from "node:path";
 
 // ../../src/vlx/src/add-to-path.ts
 import { delimiter } from "node:path";
@@ -279,6 +281,72 @@ var findPackage = async (name, projectRoot, packageJson) => {
   }
 };
 
+// ../../src/vlx/src/local.ts
+import { createHash as createHash2 } from "node:crypto";
+import {
+  mkdir as mkdir2,
+  mkdtemp,
+  readFile,
+  realpath,
+  rename,
+  rm as rm2
+} from "node:fs/promises";
+import { basename as basename2, resolve as resolve6 } from "node:path";
+import { pathToFileURL as pathToFileURL2 } from "node:url";
+var localDir = async (spec) => {
+  const { type, file } = spec.final;
+  if (type !== "file" || !file) return;
+  const dir = resolve6(file);
+  return await dirExists(dir) ? dir : void 0;
+};
+var vlxLocal = async (dir, packageJson) => {
+  const manifest = packageJson.read(dir);
+  const bins = Object.entries(manifest.bin ?? {});
+  const heads = await Promise.all(
+    bins.map(async ([k, v]) => {
+      const target = resolve6(dir, v);
+      const data = await readFile(target, "utf8").catch(
+        (cause) => {
+          throw error(`Bin target not found: ${k} -> ${v}`, {
+            path: target,
+            cause
+          });
+        }
+      );
+      return `\0${k}\0${v}\0${data.trim().split(/\r*\n/)[0]}`;
+    })
+  );
+  const key = createHash2("sha512").update(dir + heads.join("")).digest("hex").substring(0, 16);
+  const cache = new XDG("vlt/vlx-local").cache();
+  await mkdir2(cache, { recursive: true });
+  const path = resolve6(await realpath(cache), key);
+  if (!await dirExists(path)) {
+    const tmp = await mkdtemp(`${path}-`);
+    const remover = new RollbackRemove();
+    await Promise.all(
+      bins.map(
+        ([k, v]) => cmdShim(
+          resolve6(dir, v),
+          resolve6(tmp, "node_modules/.bin", k),
+          remover
+        )
+      )
+    );
+    remover.confirm();
+    await rename(tmp, path).catch(async (er) => {
+      if (!await dirExists(path)) throw er;
+      await rm2(tmp, { recursive: true, force: true });
+    });
+  }
+  return {
+    path,
+    name: manifest.name ?? basename2(dir),
+    version: manifest.version,
+    resolved: String(pathToFileURL2(dir)),
+    arg0: inferDefaultExecutable(manifest)?.[0]
+  };
+};
+
 // ../../src/vlx/src/resolve.ts
 var vlxResolve = async (positionals, options, promptFn) => {
   const noArgs = positionals.length === 0;
@@ -289,22 +357,30 @@ var vlxResolve = async (positionals, options, promptFn) => {
     if (!arg0) {
       return void 0;
     }
-    const found = await findExecutable(arg0, projectRoot);
+    const found = arg0 === "." || arg0 === ".." || /[\\/]/.test(arg0) ? void 0 : await findExecutable(arg0, projectRoot);
     if (found) return found;
     pkgOption = arg0;
     arg0 = void 0;
   }
   let pkgTarget = void 0;
+  let dir;
   if (pkgOption) {
-    const pkgSpec = Spec.parseArgs(pkgOption, options);
+    const pkgSpec = Spec.parseArgs(
+      // bare . / .. are paths, not names
+      pkgOption === "." || pkgOption === ".." ? `${pkgOption}/` : pkgOption,
+      options
+    );
     const { name, bareSpec } = pkgSpec.final;
     if (!bareSpec) {
       pkgTarget = await findPackage(name, projectRoot, packageJson);
+    } else {
+      dir = await localDir(pkgSpec);
+      if (dir) pkgTarget = await vlxLocal(dir, packageJson);
     }
     pkgTarget ??= await vlxInstall(pkgSpec, options, promptFn);
   }
   if (pkgTarget) {
-    addToPATH(resolve6(pkgTarget.path, "node_modules/.bin"));
+    addToPATH(resolve7(pkgTarget.path, "node_modules/.bin"));
     if (noArgs) return void 0;
   }
   if (!arg0) {
@@ -316,7 +392,7 @@ var vlxResolve = async (positionals, options, promptFn) => {
     arg0 = pkgTarget.arg0;
     if (!arg0) {
       const { name, version, bin } = packageJson.read(
-        resolve6(pkgTarget.path, "node_modules", pkgTarget.name)
+        dir ?? resolve7(pkgTarget.path, "node_modules", pkgTarget.name)
       );
       throw error("Package executable could not be inferred", {
         name,

package/{chunk-GZ5MYMBT.js → chunk-5IJTPZXP.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   Spec,
   kCustomInspect
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 
 // ../../src/spec/src/index.ts
 import { homedir } from "node:os";

package/{chunk-L3K2ZAOO.js → chunk-5RHABCYI.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-3D3IB4YN.js";
+} from "./chunk-TO23PR7J.js";
 import {
   Monorepo,
   PackageJson,
   PathScurry
-} from "./chunk-CB65DPZ2.js";
+} from "./chunk-I7UMHYZX.js";
 import {
   resetCaches
-} from "./chunk-SV4WK3KX.js";
+} from "./chunk-PLG3OYCX.js";
 import {
   commands,
   defaultValues,
@@ -28,7 +28,7 @@ import {
   isRecordField,
   recordFields,
   storeLinkers
-} from "./chunk-SE2FSMBR.js";
+} from "./chunk-WF6KLKRN.js";
 import {
   find,
   load,
@@ -37,14 +37,21 @@ import {
 } from "./chunk-HTOTG4TS.js";
 import {
   storeRoot
-} from "./chunk-6D54UN4T.js";
+} from "./chunk-SR2VOY5J.js";
+import {
+  cloneAvailable
+} from "./chunk-6IF3RJND.js";
 import {
   assertRecordStringString,
   assertRecordStringT,
+  builtinProtocols,
+  defaultGitHosts,
+  defaultJsrRegistries,
+  defaultRegistries,
   getOptions,
   isObject,
   isRecordStringString
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -133,6 +140,54 @@ var mergeLayers = (layers) => {
   return result;
 };
 
+// ../../src/cli-sdk/src/config/spec-aliases.ts
+var builtins = {
+  registries: defaultRegistries,
+  "jsr-registries": defaultJsrRegistries,
+  "git-hosts": defaultGitHosts
+};
+var fields = Object.keys(builtins);
+var assertSpecAliases = (values) => {
+  const owners = /* @__PURE__ */ new Map();
+  for (const field of fields) {
+    for (const key of Object.keys(builtins[field])) {
+      if (values[field]?.[key] === void 0) {
+        owners.set(key, { field, builtin: true });
+      }
+    }
+  }
+  for (const field of fields) {
+    for (const key of Object.keys(values[field] ?? {})) {
+      const name = `${field}.${key}`;
+      if (builtinProtocols.has(key)) {
+        throw error(
+          `${name} shadows the built-in \`${key}:\` protocol`,
+          {
+            code: "ECONFIG",
+            name,
+            found: key,
+            wanted: "a name that is not a built-in protocol"
+          }
+        );
+      }
+      const owner = owners.get(key);
+      if (owner) {
+        const where = `${owner.field}.${key}${owner.builtin ? " (built-in)" : ""}`;
+        throw error(
+          `\`${key}:\` spec prefix defined in both ${where} and ${name}`,
+          {
+            code: "ECONFIG",
+            name,
+            found: key,
+            wanted: `a ${field} name not used by ${owner.field}`
+          }
+        );
+      }
+      owners.set(key, { field, builtin: false });
+    }
+  }
+};
+
 // ../../src/cli-sdk/src/config/index.ts
 var kCustomInspect = /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom");
 var reducePairs = (pairs) => {
@@ -240,6 +295,7 @@ var Config = class _Config {
     const asRecords = pairsToRecords(this.parse().values);
     const extras = {
       projectRoot: this.projectRoot,
+      signal: this.#abort.signal,
       storeRoot: storeRoot(asRecords.cache),
       scurry,
       packageJson,
@@ -279,7 +335,7 @@ var Config = class _Config {
       [kCustomInspect]() {
         return Object.fromEntries(
           Object.entries(options).filter(
-            ([k]) => k !== "monorepo" && k !== "scurry" && k !== "packageJson" && k !== "packageInfo"
+            ([k]) => k !== "monorepo" && k !== "scurry" && k !== "packageJson" && k !== "packageInfo" && k !== "signal"
           )
         );
       }
@@ -297,6 +353,11 @@ var Config = class _Config {
   }
   // memoized options() getter value
   #options;
+  #abort = new AbortController();
+  /** Abort requests still in flight */
+  abort() {
+    this.#abort.abort();
+  }
   /**
    * positional arguments to the vlt process
    */
@@ -355,8 +416,9 @@ var Config = class _Config {
     if (cmdSpecific) this.jack.setConfigValues(cmdPairs);
     this.jack.applyDefaults(p);
     if (p.values["store-linker"] === "auto" && process.platform !== "linux") {
-      p.values["store-linker"] = "unpack";
-      envValues["store-linker"] = "unpack";
+      const linker = cloneAvailable() ? "clone" : "unpack";
+      p.values["store-linker"] = linker;
+      envValues["store-linker"] = linker;
     }
     const values = p.values;
     const explicit = {};
@@ -382,6 +444,9 @@ var Config = class _Config {
       const base = (k in cmdPairs ? cmdPairs[k] : fileValues[k]) ?? [];
       values[k] = dedupePairs([...base, ...pairs]);
     }
+    if (cmdOrFallback !== "config") {
+      assertSpecAliases(pairsToRecords(p.values));
+    }
     this.jack.writeEnv(p);
     process.env[kParentEnv] = JSON.stringify({
       explicit,
@@ -585,11 +650,11 @@ var Config = class _Config {
    * Deletes the specified config fields from the named file
    * Returns `true` if anything was changed.
    */
-  async deleteConfigKeys(which, fields) {
+  async deleteConfigKeys(which, fields2) {
     const data = await this.#maybeLoadConfigFile(which);
     if (!data) return false;
     let didSomething = false;
-    for (const f of fields) {
+    for (const f of fields2) {
       const [key, ...sk] = f.split(".");
       const subs = sk.join(".");
       const k = key;