@vltpkg/cli-js 1.3.8 → 1.5.0

package/{chunk-SE2FSMBR.js → chunk-CMLDLZZ3.js}

@@ -1108,6 +1108,7 @@ var canonicalCommands = {
   "run-exec": "run-exec",
   run: "run",
   setup: "setup",
+  skills: "skills",
   token: "token",
   uninstall: "uninstall",
   unpublish: "unpublish",
@@ -1168,6 +1169,7 @@ var isRecordField = (s) => recordFields.includes(s);
 var storeLinkers = [
   "auto",
   "hardlink",
+  "clone",
   "copy",
   "unpack"
 ];
@@ -1275,8 +1277,11 @@ var definition = j2.heading("Configuration").description(
 
                     There is **no** built-in \`npm\` registry URL; the \`npm\`
                     alias must be configured (e.g. via \`vlt setup\`) before it
-                    can be used. The \`gh\` and \`jsr\` aliases have built-in
-                    defaults that can be overridden here.
+                    can be used. The \`gh\` alias has a built-in default
+                    that can be overridden here. A name used by
+                    \`--jsr-registries\` or \`--git-hosts\` (e.g. \`jsr\`,
+                    \`github\`), or a built-in protocol (e.g. \`file\`), is
+                    an error.
 
                     Aliases given on the command line or in
                     \`VLT_REGISTRIES\` (newline-delimited) merge with the
@@ -1365,28 +1370,35 @@ var definition = j2.heading("Configuration").description(
     default: cacheDir
   },
   "store-linker": {
-    hint: "auto | hardlink | copy | unpack",
+    hint: "auto | hardlink | clone | copy | unpack",
     description: `How packages are placed in \`node_modules\`. Every
                     linker but \`unpack\` fills a global store under
                     \`cache\` in the background, then places packages
                     from it.
 
                     - auto: Default. On Linux, hardlink from the global
-                      store, copying any file that cannot be linked.
-                      Elsewhere, same as \`unpack\`: a hardlink is the
-                      slowest way to place a file on APFS, so macOS and
-                      Windows unpack by default.
+                      store, copying any file that cannot be linked. On
+                      macOS, clone from it, on a Node with \`node:ffi\`
+                      (26.1 and later, and \`--allow-ffi\` under
+                      \`--permission\`); a hardlink is the slowest way
+                      to place a file on APFS, so macOS without it, and
+                      Windows, unpack by default.
                     - hardlink: Hardlink from the global store on every
                       platform.
+                    - clone: Clone each package directory from the
+                      global store copy-on-write (\`clonefile\`, macOS
+                      on APFS). Files share storage with the store
+                      until edited, so editing in place is safe.
+                      Unpacks where cloning fails.
                     - copy: Copy from the global store. Use this when
                       editing files in \`node_modules\` in place, since
                       a hardlink shares its content with every project.
                     - unpack: Unpack each package tarball, skipping the
                       global store.
 
-                    A package is copied right before its install
-                    scripts run, so they don't change its files in the
-                    store.
+                    A hardlinked package is copied right before its
+                    install scripts run, so they don't change its files
+                    in the store; a cloned one needs no copy.
                     An invalid \`VLT_STORE_LINKER\` warns and uses
                     \`unpack\`.`,
     validOptions: storeLinkers,
@@ -1554,7 +1566,9 @@ var definition = j2.heading("Configuration").description(
   config: {
     hint: "all | user | project",
     description: `Specify which configuration to show or operate on when running
-                    \`vlt config\` commands. For read operations (get, pick, list):
+                    \`vlt config\` commands, and which file
+                    \`vlt skills link\` saves \`allow-skills\` to. For read
+                    operations (get, pick, list):
                     \`all\` shows merged configuration from both user and project
                     files (default). For write operations (set, delete, edit):
                     defaults to \`project\`. \`user\` shows/modifies only user-level
@@ -1735,6 +1749,11 @@ var definition = j2.heading("Configuration").description(
                     devDependencies or optionalDependencies, but you want to
                     move it to be a non-optional production dependency.`
   },
+  "save-types": {
+    description: `Also save the matching \`@types/*\` package as a
+                    devDependency for each added registry package that
+                    ships no TypeScript types of its own.`
+  },
   "save-config": {
     description: `Save the registry and git host options given on the
                     command line or via \`VLT_*\` env (\`--registry\`,
@@ -1745,6 +1764,17 @@ var definition = j2.heading("Configuration").description(
                     \`--config=user\`) after a successful \`install\`,
                     \`add\` or \`update\`. Values a config file already
                     has are left alone.`
+  },
+  "migrate-workspaces": {
+    description: `Save workspaces read from the \`workspaces\` field of
+                    the root \`package.json\` or from
+                    \`pnpm-workspace.yaml\` to the project \`vlt.json\` on
+                    \`vlt install\`. \`vlt.json\` then takes precedence.
+
+                    Set \`--no-migrate-workspaces\` to skip this; an
+                    already saved \`workspaces\` field stays until
+                    removed.`,
+    default: true
   }
 }).opt({
   "save-prefix": {
@@ -1809,6 +1839,38 @@ var definition = j2.heading("Configuration").description(
                     Runs scripts only for direct dependencies of the current project and any occurrences
                     of a specific dependency with the name "my-package" anywhere in the dependency graph.`
   }
+}).opt({
+  "allow-skills": {
+    hint: "query",
+    description: `Link the agent skills (folders with a \`SKILL.md\`) shipped by
+                    installed packages matching this DSS query into
+                    the project's agent skill dirs (see \`skills-dir\`)
+                    after \`install\`, \`ci\`, \`update\` or
+                    \`uninstall\`. End a selector with
+                    \`:skill(<name>, \u2026)\` to pick single skills (\`*\`
+                    globs, double-quoted names). Unset (the default) or
+                    \`:not(*)\` links nothing and skips all skills work.
+
+                    \`vlt install --allow-skills=<query>\` saves the query
+                    to the project \`vlt.json\`; \`vlt skills link
+                    [<query>]\` sets, saves and applies it.
+
+                    Example: --allow-skills="#agent-browser:skill(agent-browser)"
+                    Links the agent-browser skill from a package with the same name.`
+  }
+}).optList({
+  "skills-dir": {
+    hint: "path",
+    description: `Dirs to link agent skills into (see \`allow-skills\`),
+                    relative to the project root. Replaces detection:
+                    \`.agents/skills\`, plus \`<folder>/skills\` for each
+                    agent folder at the project root (e.g. \`.claude/\`),
+                    \`.claude/skills\` inside Claude Code, and existing
+                    \`.<name>/skills\` dirs. An empty list (\`[]\` in
+                    vlt.json, or \`--skills-dir=\`) links nothing. Each
+                    dir must be inside the project, not in
+                    node_modules.`
+  }
 }).opt({
   access: {
     description: "Set the access level of the package",

package/{chunk-6P5CFJR7.js → chunk-CS6AYPY5.js}

@@ -9,20 +9,20 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
-import {
-  asUnknownSpecPrefix
-} from "./chunk-A2TSRXZD.js";
 import {
   addKey,
   asDependency
-} from "./chunk-NWHKSRO3.js";
+} from "./chunk-2U4PVHP4.js";
+import {
+  asUnknownSpecPrefix
+} from "./chunk-UZ6ICZE3.js";
 import {
   joinDepIDTuple,
   splitDepID
-} from "./chunk-SV4WK3KX.js";
+} from "./chunk-F7NPYSI2.js";
 import {
   Spec
-} from "./chunk-GZ5MYMBT.js";
+} from "./chunk-LUVDMEW4.js";
 
 // ../../src/cli-sdk/src/parse-add-remove-args.ts
 import { isAbsolute, relative, resolve } from "node:path";

package/{chunk-TLY4VGMH.js → chunk-CW56EJIL.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   commandAliases,
   jack
-} from "./chunk-SE2FSMBR.js";
+} from "./chunk-CMLDLZZ3.js";
 
 // ../../src/cli-sdk/src/config/usage.ts
 var toArr = (v) => Array.isArray(v) ? v : [v];

package/{chunk-SV4WK3KX.js → chunk-F7NPYSI2.js}

@@ -11,12 +11,12 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   Spec as Spec2
-} from "./chunk-GZ5MYMBT.js";
+} from "./chunk-LUVDMEW4.js";
 import {
   Spec,
   currentDefaultRegistryName,
   defaultRegistryName
-} from "./chunk-IBGFQR23.js";
+} from "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -865,6 +865,7 @@ var graphRunSync = (options) => {
 };
 
 export {
+  isDepID,
   asDepID,
   joinDepIDTuple,
   splitDepID,

package/{chunk-6BQKR2FM.js → chunk-G3FZ2ZJK.js}

@@ -14,7 +14,7 @@ var require = _vlt_createRequire(import.meta.filename);
 var package_default = {
   name: "@vltpkg/user-agent",
   description: "The User-Agent string that vlt sends with every outbound request",
-  version: "1.3.8",
+  version: "1.5.0",
   repository: {
     type: "git",
     url: "git+https://github.com/vltpkg/vltpkg.git",

package/chunk-GUP55DM6.js

@@ -0,0 +1,59 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+import {
+  stderr
+} from "./chunk-WHWPAYZY.js";
+import {
+  migratableWSConfig,
+  resolveWSConfig
+} from "./chunk-C6ZVVEFV.js";
+import {
+  save
+} from "./chunk-HTOTG4TS.js";
+
+// ../../src/cli-sdk/src/migrate-workspaces.ts
+var found = (conf) => {
+  const resolved = resolveWSConfig(
+    conf.options.projectRoot,
+    conf.options.packageJson,
+    false
+  );
+  const workspaces = migratableWSConfig(resolved);
+  const { source } = resolved;
+  if (!workspaces?.length || !source) return;
+  return { source, workspaces };
+};
+var migrateWorkspaces = (conf) => {
+  if (!conf.options["migrate-workspaces"]) return;
+  const migrated = found(conf);
+  if (migrated) save("workspaces", migrated.workspaces);
+  return migrated;
+};
+var warnIgnoredWorkspaces = (conf) => {
+  const { loglevel } = conf.values;
+  if (loglevel === "silent" || loglevel === "error") return;
+  let migrated;
+  try {
+    migrated = found(conf);
+  } catch {
+    return;
+  }
+  if (!migrated) return;
+  stderr(
+    `Warning: vlt ci reads workspaces from vlt.json only; ignoring ${migrated.source}, its workspaces are not installed. Run \`vlt install\` to save them to vlt.json, or add them there.`
+  );
+};
+
+export {
+  migrateWorkspaces,
+  warnIgnoredWorkspaces
+};

package/chunk-HOF7LEIC.js

@@ -0,0 +1,24 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+
+// ../../src/cli-sdk/src/publish-config.ts
+var getPublishConfig = (manifest) => {
+  const pc = manifest.publishConfig;
+  if (pc && typeof pc === "object") {
+    return pc;
+  }
+  return void 0;
+};
+
+export {
+  getPublishConfig
+};