@vltpkg/cli-js 1.4.0 → 1.5.0

package/{query-IHHFMJRT.js → query-ZQLMSJ7O.js}

@@ -11,56 +11,60 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   MermaidImageView
-} from "./chunk-PHJJPY5G.js";
+} from "./chunk-LH7J5BDU.js";
 import {
   createGetAuthHeader
-} from "./chunk-HZXJ423P.js";
+} from "./chunk-Z5D5KODU.js";
 import {
   createDiffFilesProvider
 } from "./chunk-RIYFGX27.js";
-import "./chunk-TPRK6IDA.js";
+import "./chunk-7UWRR6EE.js";
 import {
   assertVltInstalled,
   createHostContextsMap
-} from "./chunk-ASLX43R3.js";
-import {
-  stdout
-} from "./chunk-FZUYGJZU.js";
-import "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
-import "./chunk-5Y4SYLJ2.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
+} from "./chunk-ARE7FKDG.js";
 import {
   GraphModifier,
-  Query,
   actual,
-  asNode,
   humanReadableOutput,
   jsonOutput,
   mermaidOutput
-} from "./chunk-OVPHE4O7.js";
+} from "./chunk-4UH3KMTD.js";
+import {
+  Query,
+  asNode,
+  hasSkills
+} from "./chunk-2U4PVHP4.js";
 import {
   SecurityArchive
-} from "./chunk-5TNXLRW2.js";
+} from "./chunk-SMXXFQPI.js";
+import {
+  stdout
+} from "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-OAJ3PO3Z.js";
-import "./chunk-APMYKJI2.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-35EG6T3J.js";
+import "./chunk-QNHBAGXQ.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -212,7 +216,8 @@ var command = async (conf) => {
       securityArchive,
       hostContexts,
       diffFiles,
-      getAuthHeader
+      getAuthHeader,
+      hasSkills
     });
     const { nodes: resultNodes } = await scopeQuery.search(
       scopeQueryString,
@@ -274,7 +279,8 @@ var command = async (conf) => {
     securityArchive,
     hostContexts,
     diffFiles,
-    getAuthHeader
+    getAuthHeader,
+    hasSkills
   });
   const query = queryString || (graph ? defaultProjectQueryString : defaultLocalScopeQueryString);
   const {

package/{registry-W7BRZZZ2.js → registry-6HKQYSZX.js}

@@ -9,18 +9,18 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
-import {
-  resolveRegistry
-} from "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-5IJTPZXP.js";
+} from "./chunk-CW56EJIL.js";
+import {
+  resolveRegistry
+} from "./chunk-UZ6ICZE3.js";
 import {
   getCommand
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-CMLDLZZ3.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-XNLSTHDK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/registry-client-src-revalidate.js

@@ -26862,9 +26862,10 @@ var gitHostWebsites = {
   gitlab: "https://gitlab.com/"
 };
 var getOptions = (options) => ({
-  catalog: {},
   catalogs: {},
   ...options,
+  // after spread: explicit `catalog: undefined` gets default too
+  catalog: options?.catalog ?? {},
   // built-in aliases are user/service-overridable: user config wins
   "jsr-registries": {
     ...defaultJsrRegistries,
@@ -27041,19 +27042,25 @@ var Spec = class _Spec {
     }
     if (this.bareSpec.startsWith("catalog:")) {
       this.catalog = this.bareSpec.substring("catalog:".length);
-      const catalog = this.catalog ? this.options.catalogs?.[this.catalog] : this.options.catalog;
+      const { catalog: defaultCatalog, catalogs = {} } = this.options;
+      const catalog = this.catalog ? Object.hasOwn(catalogs, this.catalog) ? catalogs[this.catalog] : void 0 : Object.keys(defaultCatalog).length ? defaultCatalog : void 0;
       if (!catalog) {
-        throw this.#error("Named catalog not found", {
-          name: this.catalog,
-          validOptions: this.options.catalogs && Object.keys(this.options.catalogs)
-        });
+        throw this.#catalogError(
+          this.catalog ? `Catalog "${this.catalog}" not found for ${this.spec}` : `Default catalog not found for ${this.spec}`
+        );
       }
-      const sub = catalog[this.name];
+      const catalogName = this.catalog ? `catalog "${this.catalog}"` : "default catalog";
+      const sub = Object.hasOwn(catalog, this.name) ? catalog[this.name] : void 0;
       if (!sub) {
-        throw this.#error("Name not found in catalog", {
-          name: this.name,
-          validOptions: Object.keys(catalog)
-        });
+        throw this.#catalogError(
+          `Package "${this.name}" not found in ${catalogName}`
+        );
+      }
+      if (sub.startsWith("catalog:")) {
+        throw this.#error(
+          `Catalog entry "${this.name}" in ${catalogName} cannot be a catalog: spec`,
+          { code: "ECONFIG", found: sub }
+        );
       }
       this.subspec = _Spec.parse(this.name, sub, this.options);
       this.type = "catalog";
@@ -27369,6 +27376,23 @@ var Spec = class _Spec {
       ].map((p) => `${p}:`)
     });
   }
+  /** ECONFIG error listing defined catalogs & ones defining this dep */
+  #catalogError(message) {
+    const { catalog, catalogs = {} } = this.options;
+    const defined = [
+      ...Object.keys(catalog).length ? [["", catalog]] : [],
+      ...Object.entries(catalogs)
+    ];
+    const validOptions = defined.map(([n7]) => `catalog:${n7}`);
+    const wanted = defined.filter(
+      ([, c]) => Object.hasOwn(c, this.name) && !!c[this.name]
+    ).map(([n7]) => `catalog:${n7}`);
+    return this.#error(message, {
+      code: "ECONFIG",
+      ...validOptions.length ? { validOptions } : {},
+      ...wanted.length ? { wanted } : {}
+    });
+  }
   #error(message, extra = {}) {
     return error(message, { spec: this.spec, ...extra }, this.#error);
   }
@@ -32489,7 +32513,7 @@ import { createGunzip } from "node:zlib";
 var package_default = {
   name: "@vltpkg/user-agent",
   description: "The User-Agent string that vlt sends with every outbound request",
-  version: "1.4.0",
+  version: "1.5.0",
   repository: {
     type: "git",
     url: "git+https://github.com/vltpkg/vltpkg.git",

package/{repo-L3BXAAWS.js → repo-ITA4BLZ4.js}

@@ -14,46 +14,49 @@ import {
 } from "./chunk-CLVRCGOZ.js";
 import {
   openUrl
-} from "./chunk-TPRK6IDA.js";
+} from "./chunk-7UWRR6EE.js";
 import {
   createHostContextsMap
-} from "./chunk-ASLX43R3.js";
-import "./chunk-FZUYGJZU.js";
-import "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
-import "./chunk-5Y4SYLJ2.js";
+} from "./chunk-ARE7FKDG.js";
 import {
-  PackageInfoClient
-} from "./chunk-TO23PR7J.js";
-import "./chunk-SRWDPPLX.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
-import {
-  Query,
   actual
-} from "./chunk-OVPHE4O7.js";
+} from "./chunk-4UH3KMTD.js";
+import {
+  Query
+} from "./chunk-2U4PVHP4.js";
 import {
   SecurityArchive
-} from "./chunk-5TNXLRW2.js";
+} from "./chunk-SMXXFQPI.js";
+import "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import {
+  PackageInfoClient
+} from "./chunk-VR7NRWAD.js";
+import "./chunk-SRWDPPLX.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
 import {
   Spec
-} from "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+} from "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-APMYKJI2.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-QNHBAGXQ.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";

package/{reporter-5NYOHBO7.js → reporter-UYVR2WMB.js}

@@ -11,35 +11,43 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   persistedEntries
-} from "./chunk-2AMOC4DN.js";
+} from "./chunk-XCSNI6AO.js";
+import {
+  keptLine,
+  savedLine,
+  unmatchedLines,
+  unscannedLines
+} from "./chunk-W4T5CGCO.js";
 import {
   require_emoji_regex
 } from "./chunk-VTEFO2FT.js";
-import "./chunk-5RHABCYI.js";
-import "./chunk-TO23PR7J.js";
+import "./chunk-XCQCYB6G.js";
+import "./chunk-VR7NRWAD.js";
 import "./chunk-SRWDPPLX.js";
-import {
-  source_default
-} from "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
-import "./chunk-I7UMHYZX.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import {
   ViewClass
 } from "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import {
+  source_default
+} from "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-SR2VOY5J.js";
+import "./chunk-5KW6AOTT.js";
+import "./chunk-SUU2WETN.js";
 import {
   emitter
-} from "./chunk-U7TEQCBN.js";
+} from "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-6IF3RJND.js";
 import "./chunk-Y5PA7DVK.js";
 import {
   asError
-} from "./chunk-FLH4YC6W.js";
+} from "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import {
   __commonJS,
@@ -18621,6 +18629,10 @@ var App2 = ({ trailer }) => {
 var InstallReporter = class extends ViewClass {
   #instance = null;
   start() {
+    if (!process.stdout.isTTY) {
+      const cols = Number(process.env.COLUMNS);
+      process.stdout.columns ||= Number.isInteger(cols) && cols > 0 ? cols : 80;
+    }
     this.#instance = render_default((0, import_react30.createElement)(App2));
   }
   async done(_result, { time }) {
@@ -18633,6 +18645,42 @@ var InstallReporter = class extends ViewClass {
       out += "\u{1F50E} Run `vlt query :scripts` to list them\n";
       out += "\u{1F528} Run `vlt build` to run all required scripts to build installed packages.\n";
     }
+    const {
+      linked = [],
+      removed = [],
+      conflicts = [],
+      skipped = [],
+      gitignore = [],
+      unmatched = []
+    } = _result.skills ?? {};
+    const s = (n) => n === 1 ? "" : "s";
+    const skills = [];
+    if (linked.length) {
+      const n = new Set(linked.map((r) => `${r.id}\0${r.skill}`)).size;
+      const dirs = [...new Set(linked.map((r) => r.dir))].join(", ");
+      skills.push(`\u{1F517} Linked ${n} agent skill${s(n)} into ${dirs}`);
+    }
+    if (removed.length) {
+      skills.push(
+        `\u{1F9F9} Removed ${removed.length} stale skill link${s(removed.length)}: ${removed.join(", ")}`
+      );
+    }
+    if (conflicts.length) {
+      skills.push(
+        `\u26A0\uFE0F ${conflicts.length} skill link${s(conflicts.length)} skipped, path in use or taken by another package: ${conflicts.join(", ")}`
+      );
+    }
+    skills.push(...unmatchedLines(unmatched));
+    if (skipped.length) {
+      skills.push(`\u26A0\uFE0F Skipped ${skipped.join(", ")}`);
+    }
+    if (gitignore.length) {
+      skills.push(`\u26A0\uFE0F Could not update ${gitignore.join(", ")}`);
+    }
+    skills.push(...unscannedLines(_result.skills ?? {}));
+    if (skills.length) out += `
+${skills.join("\n")}
+`;
     const saved = _result.persistedConfig;
     if (saved) {
       for (const e of persistedEntries(saved.values)) {
@@ -18640,6 +18688,16 @@ var InstallReporter = class extends ViewClass {
 Saved ${e} to ${saved.which} vlt.json`;
       }
     }
+    const migrated = _result.migratedWorkspaces;
+    if (migrated) {
+      out += `
+Saved workspaces from ${migrated.source} to vlt.json`;
+    }
+    const a = _result.allowSkills;
+    if (a?.stored) out += `
+${keptLine(a.stored)}`;
+    else if (a) out += `
+${savedLine(a.query, "project")}`;
     this.#instance?.rerender((0, import_react30.createElement)(App2, { trailer: out }));
     return void 0;
   }

package/{run-AMUUVLTI.js → run-TP2HTJRN.js}

@@ -12,37 +12,39 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-X4FVR4R5.js";
-import "./chunk-UGCKF5ZE.js";
+} from "./chunk-6W5XMVIZ.js";
+import "./chunk-43EJ4Q42.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-ASLX43R3.js";
-import "./chunk-FZUYGJZU.js";
-import "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
-import "./chunk-5Y4SYLJ2.js";
-import "./chunk-VTEFO2FT.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
+import "./chunk-ARE7FKDG.js";
 import {
   run,
   runFG
-} from "./chunk-OVPHE4O7.js";
-import "./chunk-5TNXLRW2.js";
+} from "./chunk-4UH3KMTD.js";
+import "./chunk-2U4PVHP4.js";
+import "./chunk-SMXXFQPI.js";
+import "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import "./chunk-VTEFO2FT.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 

package/{run-exec-5W3XWQZA.js → run-exec-UGCC53DV.js}

@@ -12,37 +12,39 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   ExecCommand,
   views
-} from "./chunk-X4FVR4R5.js";
-import "./chunk-UGCKF5ZE.js";
+} from "./chunk-6W5XMVIZ.js";
+import "./chunk-43EJ4Q42.js";
 import "./chunk-RIYFGX27.js";
-import "./chunk-ASLX43R3.js";
-import "./chunk-FZUYGJZU.js";
-import "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
-import "./chunk-5Y4SYLJ2.js";
-import "./chunk-VTEFO2FT.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
+import "./chunk-ARE7FKDG.js";
 import {
   runExec,
   runExecFG
-} from "./chunk-OVPHE4O7.js";
-import "./chunk-5TNXLRW2.js";
+} from "./chunk-4UH3KMTD.js";
+import "./chunk-2U4PVHP4.js";
+import "./chunk-SMXXFQPI.js";
+import "./chunk-WHWPAYZY.js";
+import "./chunk-X6JKMIOU.js";
+import "./chunk-4TSHLSRK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-I7UMHYZX.js";
+} from "./chunk-CW56EJIL.js";
+import "./chunk-VTEFO2FT.js";
+import "./chunk-IFEZ6BFV.js";
+import "./chunk-C6ZVVEFV.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-UZ6ICZE3.js";
+import "./chunk-CMLDLZZ3.js";
+import "./chunk-F7NPYSI2.js";
+import "./chunk-LUVDMEW4.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-G3FZ2ZJK.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-6LZM3I4Q.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 

package/security-archive-src-update-expired.js

@@ -1312,9 +1312,10 @@ var gitHostWebsites = {
   gitlab: "https://gitlab.com/"
 };
 var getOptions = (options) => ({
-  catalog: {},
   catalogs: {},
   ...options,
+  // after spread: explicit `catalog: undefined` gets default too
+  catalog: options?.catalog ?? {},
   // built-in aliases are user/service-overridable: user config wins
   "jsr-registries": {
     ...defaultJsrRegistries,
@@ -1491,19 +1492,25 @@ var Spec = class _Spec {
     }
     if (this.bareSpec.startsWith("catalog:")) {
       this.catalog = this.bareSpec.substring("catalog:".length);
-      const catalog = this.catalog ? this.options.catalogs?.[this.catalog] : this.options.catalog;
+      const { catalog: defaultCatalog, catalogs = {} } = this.options;
+      const catalog = this.catalog ? Object.hasOwn(catalogs, this.catalog) ? catalogs[this.catalog] : void 0 : Object.keys(defaultCatalog).length ? defaultCatalog : void 0;
       if (!catalog) {
-        throw this.#error("Named catalog not found", {
-          name: this.catalog,
-          validOptions: this.options.catalogs && Object.keys(this.options.catalogs)
-        });
+        throw this.#catalogError(
+          this.catalog ? `Catalog "${this.catalog}" not found for ${this.spec}` : `Default catalog not found for ${this.spec}`
+        );
       }
-      const sub = catalog[this.name];
+      const catalogName = this.catalog ? `catalog "${this.catalog}"` : "default catalog";
+      const sub = Object.hasOwn(catalog, this.name) ? catalog[this.name] : void 0;
       if (!sub) {
-        throw this.#error("Name not found in catalog", {
-          name: this.name,
-          validOptions: Object.keys(catalog)
-        });
+        throw this.#catalogError(
+          `Package "${this.name}" not found in ${catalogName}`
+        );
+      }
+      if (sub.startsWith("catalog:")) {
+        throw this.#error(
+          `Catalog entry "${this.name}" in ${catalogName} cannot be a catalog: spec`,
+          { code: "ECONFIG", found: sub }
+        );
       }
       this.subspec = _Spec.parse(this.name, sub, this.options);
       this.type = "catalog";
@@ -1819,6 +1826,23 @@ var Spec = class _Spec {
       ].map((p) => `${p}:`)
     });
   }
+  /** ECONFIG error listing defined catalogs & ones defining this dep */
+  #catalogError(message) {
+    const { catalog, catalogs = {} } = this.options;
+    const defined = [
+      ...Object.keys(catalog).length ? [["", catalog]] : [],
+      ...Object.entries(catalogs)
+    ];
+    const validOptions = defined.map(([n]) => `catalog:${n}`);
+    const wanted = defined.filter(
+      ([, c]) => Object.hasOwn(c, this.name) && !!c[this.name]
+    ).map(([n]) => `catalog:${n}`);
+    return this.#error(message, {
+      code: "ECONFIG",
+      ...validOptions.length ? { validOptions } : {},
+      ...wanted.length ? { wanted } : {}
+    });
+  }
   #error(message, extra = {}) {
     return error(message, { spec: this.spec, ...extra }, this.#error);
   }
@@ -2166,7 +2190,7 @@ var baseDepID = (id) => {
 var package_default = {
   name: "@vltpkg/user-agent",
   description: "The User-Agent string that vlt sends with every outbound request",
-  version: "1.4.0",
+  version: "1.5.0",
   repository: {
     type: "git",
     url: "git+https://github.com/vltpkg/vltpkg.git",
@@ -2270,7 +2294,8 @@ var __CODE_SPLIT_SCRIPT_NAME = import.meta.filename;
 var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
 var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
 var isMain = (path) => path === __CODE_SPLIT_SCRIPT_NAME || path === pathToFileURL(__CODE_SPLIT_SCRIPT_NAME).toString();
-var retrieveRemoteData = async (queue, retries) => {
+var retrieveRemoteData = async (queue, retries, timeout) => {
+  const signal = AbortSignal.timeout(timeout);
   return pRetry(
     async () => {
       const req = await fetch(SOCKET_API_V0_URL, {
@@ -2281,7 +2306,8 @@ var retrieveRemoteData = async (queue, retries) => {
         },
         body: JSON.stringify({
           components: Array.from(queue)
-        })
+        }),
+        signal
       });
       if (req.status === 404) {
         throw new AbortError("Missing API");
@@ -2294,7 +2320,7 @@ var retrieveRemoteData = async (queue, retries) => {
       const str = await req.text();
       return str.trim() + "\n";
     },
-    { retries }
+    { retries, signal }
   );
 };
 var main = async (input = process.stdin) => {
@@ -2317,7 +2343,7 @@ var main = async (input = process.stdin) => {
       input.on("error", reject);
     }
   );
-  const { dbPath, retries, ttl, expired } = payload;
+  const { dbPath, retries, timeout, ttl, expired } = payload;
   if (!expired.length) {
     return false;
   }
@@ -2328,7 +2354,7 @@ var main = async (input = process.stdin) => {
     expiredQueue.add({ purl });
     entryByNameVersion.set(`${entry.name}@${entry.version}`, entry);
   }
-  const res = await retrieveRemoteData(expiredQueue, retries);
+  const res = await retrieveRemoteData(expiredQueue, retries, timeout);
   const now = Date.now();
   const results = [];
   const json = res.split("}\n");