@vltpkg/cli-js 1.3.8 → 1.4.0

package/{access-WLKANIOE.js → access-422UGEWN.js}

@@ -11,25 +11,25 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   resolveRegistry
-} from "./chunk-A2TSRXZD.js";
+} from "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import {
   RegistryClient
-} from "./chunk-5KOLUYXH.js";
+} from "./chunk-OAJ3PO3Z.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-6D54UN4T.js";
-import "./chunk-6BQKR2FM.js";
+} from "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-IBGFQR23.js";
+import "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{bugs-5Q3QSTWP.js → bugs-RED7Y33Q.js}

@@ -14,46 +14,46 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   openUrl
-} from "./chunk-OWMR2EDW.js";
+} from "./chunk-TPRK6IDA.js";
 import {
   createHostContextsMap
-} from "./chunk-WHLYMMI2.js";
-import "./chunk-XDSZO74H.js";
-import "./chunk-KMOOTBHM.js";
+} from "./chunk-ASLX43R3.js";
+import "./chunk-FZUYGJZU.js";
+import "./chunk-QCSUWACA.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-IHXJVKAE.js";
+import "./chunk-5Y4SYLJ2.js";
 import {
   PackageInfoClient
-} from "./chunk-DL3H4EMY.js";
+} from "./chunk-TO23PR7J.js";
 import "./chunk-SRWDPPLX.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-A2TSRXZD.js";
+import "./chunk-THSYN5EK.js";
 import {
   Query,
   actual
-} from "./chunk-NWHKSRO3.js";
+} from "./chunk-OVPHE4O7.js";
 import {
   SecurityArchive
-} from "./chunk-XCDLOQZZ.js";
+} from "./chunk-5TNXLRW2.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-CB65DPZ2.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-I7UMHYZX.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-SV4WK3KX.js";
+import "./chunk-PLG3OYCX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import "./chunk-HTOTG4TS.js";
 import "./chunk-APMYKJI2.js";
-import "./chunk-6D54UN4T.js";
-import "./chunk-6BQKR2FM.js";
+import "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-IBGFQR23.js";
+import "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{build-XSFR63AW.js → build-IHMPBWRO.js}

@@ -11,24 +11,24 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   build
-} from "./chunk-NWHKSRO3.js";
-import "./chunk-XCDLOQZZ.js";
+} from "./chunk-OVPHE4O7.js";
+import "./chunk-5TNXLRW2.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
-import "./chunk-CB65DPZ2.js";
-import "./chunk-SV4WK3KX.js";
-import "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-LHPEBLOU.js";
+import "./chunk-I7UMHYZX.js";
+import "./chunk-PLG3OYCX.js";
+import "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-6BQKR2FM.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   isErrorWithCause
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{cache-UVPK5J5A.js → cache-FJP2RZJX.js}

@@ -15,47 +15,48 @@ import {
 import {
   stderr,
   stdout
-} from "./chunk-XDSZO74H.js";
-import "./chunk-KMOOTBHM.js";
+} from "./chunk-FZUYGJZU.js";
+import "./chunk-QCSUWACA.js";
 import "./chunk-G2YT2GWF.js";
-import "./chunk-IHXJVKAE.js";
+import "./chunk-5Y4SYLJ2.js";
 import "./chunk-WGDTG44V.js";
-import "./chunk-A2TSRXZD.js";
+import "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-TLY4VGMH.js";
+} from "./chunk-LHPEBLOU.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
-import "./chunk-SV4WK3KX.js";
+import "./chunk-PLG3OYCX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
-import "./chunk-SE2FSMBR.js";
+} from "./chunk-5IJTPZXP.js";
+import "./chunk-WF6KLKRN.js";
 import {
   CacheEntry
-} from "./chunk-5KOLUYXH.js";
+} from "./chunk-OAJ3PO3Z.js";
 import "./chunk-APMYKJI2.js";
 import {
   assertOk
-} from "./chunk-6D54UN4T.js";
-import "./chunk-6BQKR2FM.js";
+} from "./chunk-SR2VOY5J.js";
+import "./chunk-ZJMJ7MCT.js";
 import "./chunk-U7TEQCBN.js";
 import "./chunk-XNLSTHDK.js";
 import {
   readStoreIndex,
   removeStoreEntry,
   storeEntryCopied,
+  storeEntryLastCopied,
   storeEntryLinked,
   storeEntryNames,
   storeEntryTime,
   verifyStoreEntry
-} from "./chunk-H77JYU7F.js";
+} from "./chunk-DNRR3XMG.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   integrityHex
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -78,6 +79,7 @@ var CacheView = class extends ViewClass {
 var views = {
   human: CacheView
 };
+var pruneDays = 30;
 var usageDef = {
   command: "cache",
   usage: "<command> [flags]",
@@ -130,11 +132,14 @@ var usageDef = {
                     a file in \`node_modules\` was edited in place.`
     },
     "prune-store": {
-      usage: "",
+      usage: "[<date>]",
       description: `Remove global store entries that no \`node_modules\`
-                    folder links to. Entries ever copied from (install
-                    scripts, \`store-linker=copy\`, a cache on another
-                    drive) stay: copies do not show use.`
+                    folder links to. Copies do not show use: an entry
+                    copied or cloned from (install scripts,
+                    \`store-linker=copy\`, macOS, a cache on another
+                    drive) stays if that last happened after
+                    \`<date>\`, or in the last ${pruneDays} days
+                    without one.`
     }
   },
   examples: {
@@ -398,14 +403,21 @@ var verify = async (conf, specs, view2) => {
     ...!all && { missing }
   };
 };
-var pruneStore = async (conf, _, view2) => {
+var pruneStore = async (conf, args, view2) => {
+  const since = args.length ? new Date(args.join(" ")).getTime() : Date.now() - pruneDays * 24 * 60 * 60 * 1e3;
+  if (Number.isNaN(since)) {
+    throw error("Invalid date", {
+      code: "EUSAGE",
+      found: args.join(" ")
+    });
+  }
   const { storeRoot } = conf.options;
   const names = storeEntryNames(storeRoot);
   const removed = {};
   for (const hex of names) {
     const entry = resolve(storeRoot, hex);
     const index = readStoreIndex(entry);
-    if (storeEntryCopied(entry, index) || storeEntryLinked(entry, index)) {
+    if (storeEntryCopied(entry, index) && storeEntryLastCopied(entry) >= since || storeEntryLinked(entry, index)) {
       continue;
     }
     removeStoreEntry(entry);

package/cache-unzip-src-unzip.js

@@ -34,7 +34,27 @@ function syntaxError(message, cause, from) {
 }
 
 // ../../src/fast-split/src/index.ts
+var splitTwo = (str, delim) => {
+  const a = str.indexOf(delim);
+  return a === -1 ? [str] : [str.substring(0, a), str.substring(a + delim.length)];
+};
+var splitThree = (str, delim) => {
+  const a = str.indexOf(delim);
+  if (a === -1) return [str];
+  const l = delim.length;
+  const b = str.indexOf(delim, a + l);
+  return b === -1 ? [str.substring(0, a), str.substring(a + l)] : [
+    str.substring(0, a),
+    str.substring(a + l, b),
+    str.substring(b + l)
+  ];
+};
 function fastSplit(str, delim, limit = -1, onPart) {
+  if (onPart === void 0) {
+    if (limit === 2) return splitTwo(str, delim);
+    if (limit === 3)
+      return splitThree(str, delim);
+  }
   let i = 0;
   let p = 0;
   const l = delim.length;
@@ -7182,7 +7202,7 @@ import { join as join2 } from "node:path";
 import { performance as performance2 } from "node:perf_hooks";
 import { debuglog as debuglog3 } from "node:util";
 var debug3 = debuglog3("vlt");
-var linkers = /* @__PURE__ */ new Set(["auto", "hardlink", "copy"]);
+var linkers = /* @__PURE__ */ new Set(["auto", "hardlink", "clone", "copy"]);
 var storeEnabled = () => linkers.has(process.env.VLT_STORE_LINKER ?? "");
 var STALE_MS = 60 * 60 * 1e3;
 var parseConcurrency = (raw) => {

package/{chunk-IUL6MPP6.js → chunk-2AMOC4DN.js}

@@ -15,14 +15,14 @@ import {
   pairsToRecords,
   registrySelectionFields,
   registrySelectors
-} from "./chunk-43HNQWPQ.js";
+} from "./chunk-5RHABCYI.js";
 import {
   normalizeRegistryURL
-} from "./chunk-A2TSRXZD.js";
+} from "./chunk-THSYN5EK.js";
 import {
   getCommand,
   isRecordField
-} from "./chunk-SE2FSMBR.js";
+} from "./chunk-WF6KLKRN.js";
 import {
   find
 } from "./chunk-HTOTG4TS.js";
@@ -33,7 +33,7 @@ import {
   defaultRegistries,
   defaultRegistryName,
   isObject
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-BGA3WB7H.js → chunk-4UCADW6S.js}

@@ -11,19 +11,19 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-DL3H4EMY.js";
+} from "./chunk-TO23PR7J.js";
 import {
   RollbackRemove,
   cmdShim,
   findCmdShimIfExists,
   install
-} from "./chunk-NWHKSRO3.js";
+} from "./chunk-OVPHE4O7.js";
 import {
   PathScurry
-} from "./chunk-CB65DPZ2.js";
+} from "./chunk-I7UMHYZX.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
+} from "./chunk-5IJTPZXP.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
@@ -32,7 +32,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   parseScope
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-GZ5MYMBT.js → chunk-5IJTPZXP.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   Spec,
   kCustomInspect
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 
 // ../../src/spec/src/index.ts
 import { homedir } from "node:os";

package/{chunk-43HNQWPQ.js → chunk-5RHABCYI.js}

@@ -11,15 +11,15 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-DL3H4EMY.js";
+} from "./chunk-TO23PR7J.js";
 import {
   Monorepo,
   PackageJson,
   PathScurry
-} from "./chunk-CB65DPZ2.js";
+} from "./chunk-I7UMHYZX.js";
 import {
   resetCaches
-} from "./chunk-SV4WK3KX.js";
+} from "./chunk-PLG3OYCX.js";
 import {
   commands,
   defaultValues,
@@ -28,7 +28,7 @@ import {
   isRecordField,
   recordFields,
   storeLinkers
-} from "./chunk-SE2FSMBR.js";
+} from "./chunk-WF6KLKRN.js";
 import {
   find,
   load,
@@ -37,14 +37,21 @@ import {
 } from "./chunk-HTOTG4TS.js";
 import {
   storeRoot
-} from "./chunk-6D54UN4T.js";
+} from "./chunk-SR2VOY5J.js";
+import {
+  cloneAvailable
+} from "./chunk-6IF3RJND.js";
 import {
   assertRecordStringString,
   assertRecordStringT,
+  builtinProtocols,
+  defaultGitHosts,
+  defaultJsrRegistries,
+  defaultRegistries,
   getOptions,
   isObject,
   isRecordStringString
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -133,6 +140,54 @@ var mergeLayers = (layers) => {
   return result;
 };
 
+// ../../src/cli-sdk/src/config/spec-aliases.ts
+var builtins = {
+  registries: defaultRegistries,
+  "jsr-registries": defaultJsrRegistries,
+  "git-hosts": defaultGitHosts
+};
+var fields = Object.keys(builtins);
+var assertSpecAliases = (values) => {
+  const owners = /* @__PURE__ */ new Map();
+  for (const field of fields) {
+    for (const key of Object.keys(builtins[field])) {
+      if (values[field]?.[key] === void 0) {
+        owners.set(key, { field, builtin: true });
+      }
+    }
+  }
+  for (const field of fields) {
+    for (const key of Object.keys(values[field] ?? {})) {
+      const name = `${field}.${key}`;
+      if (builtinProtocols.has(key)) {
+        throw error(
+          `${name} shadows the built-in \`${key}:\` protocol`,
+          {
+            code: "ECONFIG",
+            name,
+            found: key,
+            wanted: "a name that is not a built-in protocol"
+          }
+        );
+      }
+      const owner = owners.get(key);
+      if (owner) {
+        const where = `${owner.field}.${key}${owner.builtin ? " (built-in)" : ""}`;
+        throw error(
+          `\`${key}:\` spec prefix defined in both ${where} and ${name}`,
+          {
+            code: "ECONFIG",
+            name,
+            found: key,
+            wanted: `a ${field} name not used by ${owner.field}`
+          }
+        );
+      }
+      owners.set(key, { field, builtin: false });
+    }
+  }
+};
+
 // ../../src/cli-sdk/src/config/index.ts
 var kCustomInspect = /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom");
 var reducePairs = (pairs) => {
@@ -240,6 +295,7 @@ var Config = class _Config {
     const asRecords = pairsToRecords(this.parse().values);
     const extras = {
       projectRoot: this.projectRoot,
+      signal: this.#abort.signal,
       storeRoot: storeRoot(asRecords.cache),
       scurry,
       packageJson,
@@ -279,7 +335,7 @@ var Config = class _Config {
       [kCustomInspect]() {
         return Object.fromEntries(
           Object.entries(options).filter(
-            ([k]) => k !== "monorepo" && k !== "scurry" && k !== "packageJson" && k !== "packageInfo"
+            ([k]) => k !== "monorepo" && k !== "scurry" && k !== "packageJson" && k !== "packageInfo" && k !== "signal"
           )
         );
       }
@@ -297,6 +353,11 @@ var Config = class _Config {
   }
   // memoized options() getter value
   #options;
+  #abort = new AbortController();
+  /** Abort requests still in flight */
+  abort() {
+    this.#abort.abort();
+  }
   /**
    * positional arguments to the vlt process
    */
@@ -355,8 +416,9 @@ var Config = class _Config {
     if (cmdSpecific) this.jack.setConfigValues(cmdPairs);
     this.jack.applyDefaults(p);
     if (p.values["store-linker"] === "auto" && process.platform !== "linux") {
-      p.values["store-linker"] = "unpack";
-      envValues["store-linker"] = "unpack";
+      const linker = cloneAvailable() ? "clone" : "unpack";
+      p.values["store-linker"] = linker;
+      envValues["store-linker"] = linker;
     }
     const values = p.values;
     const explicit = {};
@@ -382,6 +444,9 @@ var Config = class _Config {
       const base = (k in cmdPairs ? cmdPairs[k] : fileValues[k]) ?? [];
       values[k] = dedupePairs([...base, ...pairs]);
     }
+    if (cmdOrFallback !== "config") {
+      assertSpecAliases(pairsToRecords(p.values));
+    }
     this.jack.writeEnv(p);
     process.env[kParentEnv] = JSON.stringify({
       explicit,
@@ -585,11 +650,11 @@ var Config = class _Config {
    * Deletes the specified config fields from the named file
    * Returns `true` if anything was changed.
    */
-  async deleteConfigKeys(which, fields) {
+  async deleteConfigKeys(which, fields2) {
     const data = await this.#maybeLoadConfigFile(which);
     if (!data) return false;
     let didSomething = false;
-    for (const f of fields) {
+    for (const f of fields2) {
       const [key, ...sk] = f.split(".");
       const subs = sk.join(".");
       const k = key;

package/{chunk-XCDLOQZZ.js → chunk-5TNXLRW2.js}

@@ -13,10 +13,10 @@ import {
   asDepID,
   baseDepID,
   splitDepID
-} from "./chunk-SV4WK3KX.js";
+} from "./chunk-PLG3OYCX.js";
 import {
   userAgent
-} from "./chunk-6BQKR2FM.js";
+} from "./chunk-ZJMJ7MCT.js";
 import {
   I
 } from "./chunk-U7TEQCBN.js";
@@ -25,7 +25,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   defaultRegistryName
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -245,6 +245,27 @@ var asPackageReportData = (o) => {
   }
   return o;
 };
+var getItemScore = (data) => {
+  if (data._type || !data.score) return void 0;
+  const {
+    license,
+    maintenance,
+    quality,
+    supplyChain,
+    vulnerability
+  } = data.score;
+  const scoreComponents = [
+    license,
+    maintenance,
+    quality,
+    supplyChain,
+    vulnerability
+  ];
+  const overall = Number(
+    (scoreComponents.reduce((sum, score) => sum + score, 0) / scoreComponents.length).toFixed(2)
+  );
+  return { ...data.score, overall };
+};
 
 // ../../src/security-archive/src/update-expired.ts
 import { resolve } from "node:path";
@@ -483,31 +504,23 @@ var SecurityArchive = class _SecurityArchive extends I {
     for (const line of json) {
       if (!line.trim()) continue;
       const data = JSON.parse(line + "}");
+      if (data._type) continue;
       const scope = data.namespace ? `${data.namespace}/` : "";
       const name = `${scope}${data.name}`;
-      const node = this.#retrieveNodeByNameVersion(name, data.version);
+      const node = this.#retrieveNodeByNameVersion(
+        name,
+        String(data.version)
+      );
       if (node) {
+        const score = getItemScore(data);
+        if (!score) continue;
         const normalizedId = baseDepID(node.id);
-        fetchedDepIDs.add(baseDepID(node.id));
-        const scoreComponents = [
-          data.score.license,
-          data.score.maintenance,
-          data.score.quality,
-          data.score.supplyChain,
-          data.score.vulnerability
-        ];
-        const newAverageScore = Number(
-          (scoreComponents.reduce((sum, score) => sum + score, 0) / scoreComponents.length).toFixed(2)
-        );
-        const scoreWithNewAverage = {
-          ...data.score,
-          overall: newAverageScore
-        };
+        fetchedDepIDs.add(normalizedId);
         this.set(
           normalizedId,
           asPackageReportData({
             ...data,
-            score: scoreWithNewAverage
+            score
           })
         );
       } else {

package/{chunk-IHXJVKAE.js → chunk-5Y4SYLJ2.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   isError,
   isObject
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-FLH4YC6W.js";
 
 // ../../src/output/src/error.ts
 var parseError = (err) => {
@@ -46,5 +46,6 @@ var asRootError = (v, match) => {
 
 export {
   parseError,
+  findRootError,
   asRootError
 };