@vltpkg/cli-js 1.4.0 → 1.5.0

package/chunk-W4T5CGCO.js

@@ -0,0 +1,52 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+
+// ../../src/cli-sdk/src/allow-skills.ts
+var storedAllowSkills = (conf) => {
+  const { project, user } = conf.layers;
+  const p = project?.["allow-skills"];
+  if (p) return { query: p, which: "project" };
+  if (project && "allow-skills" in project) return void 0;
+  const u = user?.["allow-skills"];
+  return u ? { query: u, which: "user" } : void 0;
+};
+var configLabel = (which) => which === "user" ? "user vlt.json" : "vlt.json";
+var saveAllowSkills = async (conf) => {
+  const query = conf.explicit["allow-skills"];
+  if (!query || query === ":not(*)") return void 0;
+  const stored = storedAllowSkills(conf);
+  if (stored?.query === query) return void 0;
+  if (stored) return { query, stored };
+  await conf.addConfigToFile("project", { "allow-skills": query });
+  return { query };
+};
+var unmatchedLines = (unmatched = []) => unmatched.map(
+  ({ pattern, skills }) => `\u26A0\uFE0F No skill matches "${pattern}"; ${!skills ? "no installed package matches its selector" : skills.length ? `the selected packages ship: ${skills.join(", ")}` : "the selected packages ship no skills"}`
+);
+var unscannedLines = ({
+  unscanned = [],
+  unscannedReason
+}) => unscanned.length ? [
+  `\u23F3 ${unscanned.length} skill${unscanned.length === 1 ? "" : "s"} left out, ${unscannedReason === "timeout" ? "security data timed out" : "Socket has not scanned their packages yet"}: ${unscanned.join(", ")}. Try again later.`
+] : [];
+var savedLine = (query, which) => `Saved allow-skills="${query}" to ${configLabel(which)}`;
+var keptLine = (s) => `allow-skills is already set (${configLabel(s.which)}): "${s.query}"; not replaced. Run vlt skills link to change it, or edit ${configLabel(s.which)}`;
+
+export {
+  storedAllowSkills,
+  configLabel,
+  saveAllowSkills,
+  unmatchedLines,
+  unscannedLines,
+  savedLine,
+  keptLine
+};

package/{chunk-FZUYGJZU.js → chunk-WHWPAYZY.js}

@@ -12,43 +12,38 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   generateDefaultHelp,
   generateFullHelp
-} from "./chunk-QCSUWACA.js";
-import {
-  flush,
-  trackCommand,
-  trackError
-} from "./chunk-G2YT2GWF.js";
+} from "./chunk-X6JKMIOU.js";
 import {
   parseError
-} from "./chunk-5Y4SYLJ2.js";
+} from "./chunk-4TSHLSRK.js";
+import {
+  isLazyView,
+  isViewClass,
+  loadLazyView
+} from "./chunk-4KCU2KZL.js";
 import {
   hasConfiguredRegistry,
   hasNpmRegistry,
   missingNpmRegistryError,
   missingRegistryError
-} from "./chunk-THSYN5EK.js";
+} from "./chunk-UZ6ICZE3.js";
 import {
-  isLazyView,
-  isViewClass,
-  loadLazyView
-} from "./chunk-4KCU2KZL.js";
+  defaultView
+} from "./chunk-CMLDLZZ3.js";
 import {
   isGraphRunError,
   splitDepID
-} from "./chunk-PLG3OYCX.js";
-import {
-  defaultView
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-F7NPYSI2.js";
 import {
   emitter
-} from "./chunk-U7TEQCBN.js";
+} from "./chunk-B6RIGNEO.js";
 import {
   XDG
 } from "./chunk-XNLSTHDK.js";
 import {
   isErrorWithCause,
   isObject
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 
 // ../../src/cli-sdk/src/print-err.ts
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -265,8 +260,11 @@ var printCode = (err, usage, stderr2, format) => {
       return {};
     }
     case "ECONFIG": {
-      const { found, wanted, validOptions } = err.cause;
+      const { found, wanted, validOptions, from } = err.cause;
       stderr2(`Config Error: ${err.message}`);
+      if (from) {
+        stderr2(indent(`From: ${format(from)}`));
+      }
       if (found) {
         stderr2(indent(`Found: ${format(found)}`));
       }
@@ -281,6 +279,105 @@ var printCode = (err, usage, stderr2, format) => {
   }
 };
 
+// ../../src/cli-sdk/src/telemetry.ts
+import { randomUUID } from "node:crypto";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { createRequire } from "node:module";
+var POSTHOG_API_KEY = "phc_k9xCAgC6sPIBLb5UhjhnGWpt1mos0hLV4mmEhZTGPpO";
+var POSTHOG_HOST = "https://us.i.posthog.com";
+var SHUTDOWN_TIMEOUT_MS = 2e3;
+var xdg = new XDG("vlt");
+var isOptedOut = () => process.env.DO_NOT_TRACK === "1" || process.env.VLT_TELEMETRY === "0";
+var getAnonymousId = () => {
+  const dir = xdg.data();
+  const file = xdg.data("telemetry-id");
+  try {
+    const existing = readFileSync2(file, "utf8").trim();
+    if (existing) return existing;
+  } catch {
+  }
+  const id = randomUUID();
+  try {
+    mkdirSync2(dir, { recursive: true });
+    writeFileSync2(file, id + "\n");
+  } catch {
+  }
+  return id;
+};
+var _posthog;
+var _initFailed = false;
+var getClient = () => {
+  if (_posthog) return _posthog;
+  if (_initFailed) return void 0;
+  try {
+    const req = createRequire(import.meta.url);
+    const { PostHog } = req("posthog-node");
+    _posthog = new PostHog(POSTHOG_API_KEY, {
+      host: POSTHOG_HOST,
+      // Buffer up to 20 events and flush every 10 s — but we always
+      // call shutdown at the end so this is just a safety net.
+      flushAt: 20,
+      flushInterval: 1e4
+    });
+    return _posthog;
+  } catch {
+    _initFailed = true;
+    return void 0;
+  }
+};
+var trackCommand = (ev, telemetryFlag) => {
+  if (telemetryFlag === false || isOptedOut()) return;
+  const ph = getClient();
+  if (!ph) return;
+  try {
+    ph.capture({
+      distinctId: getAnonymousId(),
+      event: "cli_command",
+      properties: { ...ev }
+    });
+  } catch {
+  }
+};
+var trackInstall = (ev, telemetryFlag) => {
+  if (telemetryFlag === false || isOptedOut()) return;
+  const ph = getClient();
+  if (!ph) return;
+  try {
+    ph.capture({
+      distinctId: getAnonymousId(),
+      event: "cli_install",
+      properties: { ...ev }
+    });
+  } catch {
+  }
+};
+var trackError = (ev, telemetryFlag) => {
+  if (telemetryFlag === false || isOptedOut()) return;
+  const ph = getClient();
+  if (!ph) return;
+  try {
+    ph.capture({
+      distinctId: getAnonymousId(),
+      event: "cli_error",
+      properties: { ...ev }
+    });
+  } catch {
+  }
+};
+var flush = () => {
+  const ph = _posthog;
+  if (!ph) return Promise.resolve();
+  _posthog = void 0;
+  return Promise.race([
+    ph.shutdown().catch(() => {
+    }),
+    new Promise((r) => {
+      const t = setTimeout(r, SHUTDOWN_TIMEOUT_MS);
+      if (typeof t === "object" && "unref" in t) t.unref();
+    })
+  ]);
+};
+
 // ../../src/cli-sdk/src/output.ts
 import {
   formatWithOptions as formatWithOptions2,
@@ -641,6 +738,7 @@ var outputCommand = async (cliCommand, conf, { start, vltVersion } = {
 
 export {
   indent,
+  trackInstall,
   stdout,
   stderr,
   flushAndExit,

package/{chunk-QCSUWACA.js → chunk-X6JKMIOU.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-WGDTG44V.js";
 import {
   commandAliases
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
 
 // ../../node_modules/.vlt/~npm~package-json-from-dist@1.0.1/node_modules/package-json-from-dist/dist/esm/index.js
 import { readFileSync } from "node:fs";
@@ -227,6 +227,10 @@ var commandHelp = {
     desc: "Configure your vlt.io account registries",
     defaultOrder: 0
   },
+  skills: {
+    args: "[list|link]",
+    desc: "Manage agent skills from installed packages"
+  },
   token: {
     args: "[add|rm]",
     desc: "Manage authentication tokens"

package/{chunk-5RHABCYI.js → chunk-XCQCYB6G.js}

@@ -11,15 +11,12 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   PackageInfoClient
-} from "./chunk-TO23PR7J.js";
+} from "./chunk-VR7NRWAD.js";
 import {
   Monorepo,
   PackageJson,
   PathScurry
-} from "./chunk-I7UMHYZX.js";
-import {
-  resetCaches
-} from "./chunk-PLG3OYCX.js";
+} from "./chunk-C6ZVVEFV.js";
 import {
   commands,
   defaultValues,
@@ -28,7 +25,10 @@ import {
   isRecordField,
   recordFields,
   storeLinkers
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
+import {
+  resetCaches
+} from "./chunk-F7NPYSI2.js";
 import {
   find,
   load,
@@ -37,7 +37,7 @@ import {
 } from "./chunk-HTOTG4TS.js";
 import {
   storeRoot
-} from "./chunk-SR2VOY5J.js";
+} from "./chunk-5KW6AOTT.js";
 import {
   cloneAvailable
 } from "./chunk-6IF3RJND.js";
@@ -51,7 +51,7 @@ import {
   getOptions,
   isObject,
   isRecordStringString
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-2AMOC4DN.js → chunk-XCSNI6AO.js}

@@ -15,14 +15,14 @@ import {
   pairsToRecords,
   registrySelectionFields,
   registrySelectors
-} from "./chunk-5RHABCYI.js";
+} from "./chunk-XCQCYB6G.js";
 import {
   normalizeRegistryURL
-} from "./chunk-THSYN5EK.js";
+} from "./chunk-UZ6ICZE3.js";
 import {
   getCommand,
   isRecordField
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
 import {
   find
 } from "./chunk-HTOTG4TS.js";
@@ -33,7 +33,7 @@ import {
   defaultRegistries,
   defaultRegistryName,
   isObject
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-4UCADW6S.js → chunk-XD5KUDXX.js}

@@ -9,21 +9,21 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
-import {
-  PackageInfoClient
-} from "./chunk-TO23PR7J.js";
 import {
   RollbackRemove,
   cmdShim,
   findCmdShimIfExists,
   install
-} from "./chunk-OVPHE4O7.js";
+} from "./chunk-4UH3KMTD.js";
+import {
+  PackageInfoClient
+} from "./chunk-VR7NRWAD.js";
 import {
   PathScurry
-} from "./chunk-I7UMHYZX.js";
+} from "./chunk-C6ZVVEFV.js";
 import {
   Spec
-} from "./chunk-5IJTPZXP.js";
+} from "./chunk-LUVDMEW4.js";
 import {
   walkUp
 } from "./chunk-HTOTG4TS.js";
@@ -32,7 +32,7 @@ import {
 } from "./chunk-XNLSTHDK.js";
 import {
   parseScope
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{chunk-HZXJ423P.js → chunk-Z5D5KODU.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   getTokenByURL,
   registryKeys
-} from "./chunk-OAJ3PO3Z.js";
+} from "./chunk-35EG6T3J.js";
 
 // ../../src/cli-sdk/src/query-auth.ts
 var createGetAuthHeader = (conf) => {

package/{ci-YSKNNO5M.js → ci-ESVUMOZO.js}

@@ -9,27 +9,38 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
+import {
+  warnIgnoredWorkspaces
+} from "./chunk-GUP55DM6.js";
 import {
   install
-} from "./chunk-OVPHE4O7.js";
-import "./chunk-5TNXLRW2.js";
+} from "./chunk-4UH3KMTD.js";
+import "./chunk-2U4PVHP4.js";
+import "./chunk-SMXXFQPI.js";
+import "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import {
   lazyView
 } from "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 
@@ -55,6 +66,10 @@ var usage = () => commandUsage({
       value: "<query>",
       description: "Filter which packages are allowed to run lifecycle scripts using DSS query syntax."
     },
+    "allow-skills": {
+      value: "<query>",
+      description: "Link agent skills of packages matching this DSS query into the project's agent skill dirs."
+    },
     "lockfile-only": {
       description: "Only update lockfile and package.json files; skip node_modules operations."
     }
@@ -63,21 +78,24 @@ var usage = () => commandUsage({
 var views = {
   json: (i) => i.graph.toJSON(),
   human: lazyView(
-    async () => (await import("./reporter-5NYOHBO7.js")).InstallReporter
+    async () => (await import("./reporter-UYVR2WMB.js")).InstallReporter
   )
 };
 var command = async (conf) => {
+  warnIgnoredWorkspaces(conf);
   const ciOptions = {
     ...conf.options,
     // same default as install: no scripts
     allowScripts: conf.get("allow-scripts") ?? ":not(*)",
+    allowSkills: conf.get("allow-skills"),
+    skillsDirs: conf.get("skills-dir"),
     expectLockfile: true,
     frozenLockfile: true,
     cleanInstall: true,
     lockfileOnly: conf.options["lockfile-only"]
   };
-  const { buildQueue, graph } = await install(ciOptions);
-  return { buildQueue, graph };
+  const { buildQueue, graph, skills } = await install(ciOptions);
+  return { buildQueue, graph, ...skills ? { skills } : null };
 };
 export {
   command,

package/cli-package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/cli-sdk",
   "description": "The source for the vlt CLI",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",

package/{config-CSPCDMR3.js → config-TMB2X6DW.js}

@@ -16,25 +16,27 @@ import {
   kCustomInspect,
   pairsToRecords,
   recordsToPairs
-} from "./chunk-5RHABCYI.js";
-import "./chunk-TO23PR7J.js";
+} from "./chunk-XCQCYB6G.js";
+import "./chunk-VR7NRWAD.js";
 import "./chunk-SRWDPPLX.js";
-import "./chunk-I7UMHYZX.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import {
   commands,
   definition,
   isRecordField,
   recordFields
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-6IF3RJND.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 export {

package/{config-HO7GY3QT.js → config-ZVVLFKR7.js}

@@ -15,35 +15,37 @@ import {
 } from "./chunk-DBANBIL2.js";
 import {
   asRootError
-} from "./chunk-5Y4SYLJ2.js";
+} from "./chunk-4TSHLSRK.js";
+import {
+  commandUsage
+} from "./chunk-CW56EJIL.js";
 import {
   pairsToRecords,
   recordsToPairs
-} from "./chunk-5RHABCYI.js";
-import "./chunk-TO23PR7J.js";
+} from "./chunk-XCQCYB6G.js";
+import "./chunk-VR7NRWAD.js";
 import "./chunk-SRWDPPLX.js";
-import {
-  commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import {
   getSortedKeys,
   isRecordField
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import {
   find,
   load
 } from "./chunk-HTOTG4TS.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-6IF3RJND.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   isObject
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{create-2TJT3AHJ.js → create-BLTNKSBQ.js}

@@ -11,46 +11,48 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   vlxResolve
-} from "./chunk-4UCADW6S.js";
+} from "./chunk-XD5KUDXX.js";
 import {
   ExecCommand,
   views
-} from "./chunk-X4FVR4R5.js";
-import "./chunk-UGCKF5ZE.js";
+} from "./chunk-6W5XMVIZ.js";
+import "./chunk-43EJ4Q42.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-ASLX43R3.js";
-import {
-  styleTextStdout
-} from "./chunk-FZUYGJZU.js";
-import "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
-import "./chunk-5Y4SYLJ2.js";
-import "./chunk-VTEFO2FT.js";
-import "./chunk-TO23PR7J.js";
-import "./chunk-SRWDPPLX.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
+import "./chunk-ARE7FKDG.js";
 import {
   exec,
   execFG
-} from "./chunk-OVPHE4O7.js";
-import "./chunk-5TNXLRW2.js";
+} from "./chunk-4UH3KMTD.js";
+import "./chunk-2U4PVHP4.js";
+import "./chunk-SMXXFQPI.js";
+import {
+  styleTextStdout
+} from "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import "./chunk-VTEFO2FT.js";
+import "./chunk-VR7NRWAD.js";
+import "./chunk-SRWDPPLX.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";