@vltpkg/cli-js 1.4.0 → 1.6.0

package/skills-UBBMSBDQ.js

@@ -0,0 +1,416 @@
+var global = globalThis;
+import {Buffer} from "node:buffer";
+import {setTimeout as _vlt_setTimeout,clearTimeout as _vlt_clearTimeout,setImmediate as _vlt_setImmediate,clearImmediate as _vlt_clearImmediate,setInterval as _vlt_setInterval,clearInterval as _vlt_clearInterval} from "node:timers";
+globalThis.setTimeout = _vlt_setTimeout;
+globalThis.clearTimeout = _vlt_clearTimeout;
+globalThis.setImmediate = _vlt_setImmediate;
+globalThis.clearImmediate = _vlt_clearImmediate;
+globalThis.setInterval = _vlt_setInterval;
+globalThis.clearInterval = _vlt_clearInterval;
+import {createRequire as _vlt_createRequire} from "node:module";
+var require = _vlt_createRequire(import.meta.filename);
+import {
+  mermaidOutput
+} from "./chunk-36UIE654.js";
+import {
+  assertQuery,
+  linkSkills,
+  listSkills
+} from "./chunk-F5LZMLAQ.js";
+import "./chunk-YTDABXPD.js";
+import {
+  styleTextStdout
+} from "./chunk-KVWGMSPW.js";
+import "./chunk-LGQVZTYR.js";
+import "./chunk-EYGOEAJM.js";
+import {
+  commandUsage
+} from "./chunk-HT6FS4VB.js";
+import {
+  configLabel,
+  savedLine,
+  storedAllowSkills,
+  unmatchedLines,
+  unscannedLines
+} from "./chunk-W4T5CGCO.js";
+import {
+  configWriteTarget
+} from "./chunk-LP3ORD3D.js";
+import "./chunk-LCLRP64K.js";
+import "./chunk-SRWDPPLX.js";
+import "./chunk-JV5XR5JQ.js";
+import "./chunk-EMTGRCSE.js";
+import "./chunk-TQQO2F56.js";
+import "./chunk-4KCU2KZL.js";
+import "./chunk-WGDTG44V.js";
+import "./chunk-E74WGW5C.js";
+import "./chunk-GCTREKA4.js";
+import "./chunk-MCDLJZXT.js";
+import "./chunk-7M2VTFLP.js";
+import "./chunk-EFHOWRKU.js";
+import "./chunk-CAV7FKWQ.js";
+import "./chunk-6D3QAFNZ.js";
+import "./chunk-HTOTG4TS.js";
+import "./chunk-GEQFMH5M.js";
+import "./chunk-4GMNWW4C.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
+import "./chunk-XNLSTHDK.js";
+import "./chunk-6IF3RJND.js";
+import "./chunk-PDWPFR5T.js";
+import "./chunk-Y5PA7DVK.js";
+import {
+  asError
+} from "./chunk-BF5DRGRZ.js";
+import {
+  error
+} from "./chunk-WZWDS3W4.js";
+import "./chunk-PZLD7RTK.js";
+
+// ../../src/cli-sdk/src/commands/skills.ts
+import { styleText } from "node:util";
+
+// ../../src/cli-sdk/src/skills-prompt.ts
+import { createInterface } from "node:readline/promises";
+var interactive = () => process.stdin.isTTY;
+var open = (s) => {
+  const rl = createInterface({
+    input: s.input ?? process.stdin,
+    output: s.output ?? process.stdout,
+    // prefill and line editing
+    terminal: true
+  });
+  rl.on("SIGINT", () => rl.close());
+  let done = false;
+  const closed = new Promise(
+    (r) => rl.once("close", () => {
+      done = true;
+      r(void 0);
+    })
+  );
+  const ask = async (query, prefill) => {
+    if (done) return void 0;
+    const q = rl.question(query).catch(() => void 0);
+    if (prefill) rl.write(prefill);
+    return Promise.race([q, closed]);
+  };
+  return { rl, ask };
+};
+var confirm = async (question, s = {}) => {
+  const { rl, ask } = open(s);
+  try {
+    const a = await ask(question);
+    return a === void 0 ? void 0 : /^y(es)?$/i.test(a.trim());
+  } finally {
+    rl.close();
+  }
+};
+var editQuery = async ({
+  current,
+  prefill,
+  check,
+  ...s
+}) => {
+  const output = s.output ?? process.stdout;
+  if (current !== void 0) {
+    output.write(
+      "\n\u26A0\uFE0F The new allow-skills replaces the current one. Make sure it still\nselects every skill you want: skills it no longer selects are unlinked.\n\n" + styleTextStdout(
+        "yellow",
+        `Current allow-skills: ${current}`
+      ) + "\n"
+    );
+  }
+  const prompt = styleTextStdout("cyan", "New allow-skills: ");
+  const { rl, ask } = open(s);
+  try {
+    let fill = prefill;
+    for (; ; ) {
+      const a = (await ask(prompt, fill))?.trim();
+      if (!a) return void 0;
+      try {
+        await check(a);
+        return a;
+      } catch (e) {
+        output.write(`${asError(e).message}
+`);
+        fill = a;
+      }
+    }
+  } finally {
+    rl.close();
+  }
+};
+
+// ../../src/cli-sdk/src/commands/skills.ts
+var needsRegistry = true;
+var usage = () => commandUsage({
+  command: "skills",
+  usage: ["", "list [<query>]", "link [<query>]"],
+  description: `Manage the agent skills shipped by installed packages.
+
+      A skill is a folder with a \`SKILL.md\` file
+      (https://agentskills.io/specification). Packages ship them as a
+      root \`SKILL.md\`, or at \`<name>/SKILL.md\` in \`skills/\`,
+      \`dist/skills/\` or \`.agents/skills/\`: the first skill of a name
+      wins.
+
+      Skills are linked into the project's agent skill dirs:
+      \`.agents/skills\`, plus \`<folder>/skills\` for each agent folder
+      at the project root (e.g. \`.claude/\`), or the \`skills-dir\`
+      config. When packages ship skills with the same name, one is
+      linked and the others are reported. Only links made by vlt are
+      ever replaced or removed; anything else in the way is skipped.
+
+      Use --target or a query after the subcommand to select packages
+      using DSS query syntax. End a selector with
+      \`:skill(<name>, \u2026)\` to pick single skills, e.g.
+      \`#skills:skill(find-skills)\`. Use
+      \`vlt install --allow-skills=<query>\` to link skills on install.`,
+  subcommands: {
+    list: {
+      usage: "[<query>]",
+      description: `List the skills of installed packages. The default.
+                      Selects all packages (\`*\`) by default. Applies
+                      \`:skill()\`: preview a query before \`link\` saves
+                      it.`
+    },
+    link: {
+      usage: "[<query>]",
+      description: `Set, save and apply \`allow-skills\`: link what the
+                      query selects and remove vlt links to other skills.
+                      With no query: the stored one, or
+                      \`:not(:malware)\`. Asks before replacing or editing
+                      a stored query (-y skips). Saves to the project
+                      vlt.json, or the user one with --config=user.`
+    }
+  },
+  options: {
+    target: {
+      value: "<query>",
+      description: "Query selector to filter packages using DSS syntax."
+    },
+    yes: {
+      description: "Skip the prompts: replace or keep the stored allow-skills without asking."
+    },
+    config: {
+      value: "user|project",
+      description: "vlt.json to save allow-skills to (default: project)."
+    },
+    view: {
+      value: "[human | json | mermaid]",
+      description: "Output format. mermaid: list only."
+    }
+  }
+});
+var plural = (n, s) => `${n} ${s}${n === 1 ? "" : "s"}`;
+var lines = (header, items) => [header, ...items.map((i) => `  ${i}`)].join("\n");
+var notes = (r) => [
+  ...r.skipped ? [`\u26A0\uFE0F Skipped ${r.skipped.join(", ")}`] : [],
+  ...r.gitignore ? [`\u26A0\uFE0F Could not update ${r.gitignore.join(", ")}`] : [],
+  ...unscannedLines(r)
+];
+var pkgLabel = (s) => {
+  const pkg = s.version ? `${s.name}@${s.version}` : s.name;
+  return s.alias ? `${s.alias} (${pkg})` : pkg;
+};
+var linkedSuffix = (s, dirs) => dirs.length && dirs.every((d) => s.linked.includes(d)) ? " (linked)" : s.linked.length ? ` (linked in ${s.linked.join(", ")})` : "";
+var row = (s, dirs) => `${s.skill} (${pkgLabel(s)})${linkedSuffix(s, dirs)}`;
+var listNotes = (r) => [
+  ...!r.dirs.length && !r.skipped ? ["No agent skill dirs: skills-dir is empty"] : [],
+  ...notes(r)
+];
+var humanList = (r, { colors } = {}) => {
+  const style = (format) => (s) => colors ? styleText(format, s, { validateStream: false }) : s;
+  const yellow = style("yellow");
+  const rows = r.skills.map((s) => {
+    const x = row(s, r.dirs);
+    return s.linked.length ? yellow(x) : x;
+  });
+  const last = rows.length - 1;
+  return [
+    ...rows.length ? [
+      style("reset")(
+        [
+          r.project,
+          ...rows.map(
+            (x, i) => `${i === last ? "\u2514\u2500\u2500" : "\u251C\u2500\u2500"} ${x}`
+          )
+        ].join("\n")
+      )
+    ] : ["No agent skills found in installed packages."],
+    ...listNotes(r)
+  ].join("\n");
+};
+var mermaidList = (r) => {
+  const children = /* @__PURE__ */ new Map();
+  for (const s of r.skills) {
+    const list = children.get(s.id) ?? [];
+    list.push({
+      edge: pkgLabel(s),
+      label: `${s.skill}${linkedSuffix(s, r.dirs)}`
+    });
+    children.set(s.id, list);
+  }
+  const { graph } = r;
+  return [
+    mermaidOutput({
+      edges: [],
+      importers: /* @__PURE__ */ new Set([graph.mainImporter]),
+      nodes: [...graph.nodes.values()].filter(
+        (n) => n === graph.mainImporter || children.has(n.id)
+      ),
+      children
+    }),
+    ...listNotes(r).map((n) => `%% ${n}`)
+  ].join("\n");
+};
+var jsonSkill = ({
+  skill,
+  name,
+  alias,
+  version,
+  id,
+  description,
+  ...rest
+}) => ({
+  name: skill,
+  description,
+  "dependency-name": alias ?? name,
+  "package-id": id,
+  ...rest
+});
+var count = (rows) => new Set(rows.map((r) => `${r.id}\0${r.skill}`)).size;
+var humanLink = (r) => {
+  const out = [];
+  if (r.linked.length) {
+    out.push(
+      lines(
+        `\u{1F517} Linked ${plural(count(r.linked), "agent skill")}:`,
+        r.linked.map((s) => s.mount)
+      )
+    );
+  } else if (r.unchanged.length) {
+    out.push(
+      `${plural(count(r.unchanged), "agent skill")} already linked.`
+    );
+  }
+  if (r.removed.length) {
+    out.push(
+      lines(
+        `\u{1F9F9} Removed ${plural(r.removed.length, "skill link")}:`,
+        r.removed
+      )
+    );
+  }
+  if (r.conflicts.length) {
+    out.push(
+      lines(
+        `\u26A0\uFE0F Skipped ${plural(r.conflicts.length, "skill")}, path in use or taken by another package:`,
+        r.conflicts
+      )
+    );
+  }
+  out.push(...notes(r));
+  return out.join("\n") || "No agent skills found to link.";
+};
+var human = (r, o) => r.action === "list" ? humanList(r, o) : r.action === "unchanged" ? "No changes made." : [
+  humanLink(r),
+  ...unmatchedLines(r.unmatched),
+  ...r.saved ? [savedLine(r.query, r.saved)] : []
+].join("\n");
+var views = {
+  human,
+  json: (r) => {
+    if (r.action !== "list") return r;
+    const { project, graph, ...rest } = r;
+    return { ...rest, skills: rest.skills.map(jsonSkill) };
+  },
+  mermaid: (r) => r.action === "list" ? mermaidList(r) : human(r)
+};
+var defaultQuery = ":not(:malware)";
+var where = (which) => which === "user" ? "in the user vlt.json" : "for this project (vlt.json)";
+var pickQuery = async (conf, given) => {
+  const check = (q) => assertQuery(q, "allow-skills", ["skill"]);
+  const stored = storedAllowSkills(conf);
+  const yes = !!conf.get("yes");
+  const tty = interactive();
+  if (given) {
+    await check(given);
+    if (!stored || stored.query === given || yes) return given;
+    if (!tty) {
+      throw error(
+        `allow-skills is already set (${configLabel(stored.which)}): "${stored.query}"; pass -y to replace it`,
+        { code: "EUSAGE", found: given, wanted: stored.query }
+      );
+    }
+    if (!await confirm(
+      `allow-skills is already set ${where(stored.which)}: "${stored.query}". Replace it? [y/N] `
+    )) {
+      return void 0;
+    }
+    return editQuery({ current: stored.query, prefill: given, check });
+  }
+  if (stored) {
+    if (yes || !tty) return stored.query;
+    const edit = await confirm(
+      `allow-skills is set ${where(stored.which)}: "${stored.query}". Edit it? [y/N] `
+    );
+    if (edit === void 0) return void 0;
+    return edit ? editQuery({
+      current: stored.query,
+      prefill: stored.query,
+      check
+    }) : stored.query;
+  }
+  if (yes || !tty) return defaultQuery;
+  return editQuery({ prefill: defaultQuery, check });
+};
+var command = async (conf) => {
+  const [sub = "list", query] = conf.positionals;
+  const target = conf.get("target") || query;
+  const opts = {
+    ...conf.options,
+    projectRoot: conf.projectRoot,
+    skillsDirs: conf.get("skills-dir")
+  };
+  switch (sub) {
+    case "list":
+    case "ls":
+      return {
+        action: "list",
+        ...await listSkills({ ...opts, target })
+      };
+    case "link": {
+      const query2 = await pickQuery(conf, target);
+      if (query2 === void 0) return { action: "unchanged" };
+      const res = await linkSkills({
+        ...opts,
+        target: query2,
+        apply: true
+      });
+      let saved;
+      if (storedAllowSkills(conf)?.query !== query2) {
+        saved = configWriteTarget(conf, "project");
+        await conf.addConfigToFile(saved, { "allow-skills": query2 });
+      }
+      return {
+        action: "link",
+        query: query2,
+        ...saved && { saved },
+        ...res
+      };
+    }
+    default:
+      throw error("Unknown skills subcommand", {
+        code: "EUSAGE",
+        found: sub,
+        validOptions: ["list", "ls", "link"]
+      });
+  }
+};
+export {
+  command,
+  needsRegistry,
+  usage,
+  views
+};

package/{src-4CYCUWZL.js → src-FUSTSM4J.js}

@@ -11,44 +11,52 @@ import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
 import {
   loadCommand
-} from "./chunk-T6FBP4OU.js";
+} from "./chunk-4E65BBTM.js";
 import {
   flushAndExit,
   indent,
   outputCommand,
   stderr,
   stdout
-} from "./chunk-FZUYGJZU.js";
-import {
-  loadPackageJson
-} from "./chunk-QCSUWACA.js";
-import "./chunk-G2YT2GWF.js";
+} from "./chunk-KVWGMSPW.js";
+import "./chunk-LGQVZTYR.js";
 import {
   asRootError,
   findRootError
-} from "./chunk-5Y4SYLJ2.js";
+} from "./chunk-EYGOEAJM.js";
 import {
   Config
-} from "./chunk-5RHABCYI.js";
-import "./chunk-TO23PR7J.js";
+} from "./chunk-LP3ORD3D.js";
+import "./chunk-LCLRP64K.js";
 import "./chunk-SRWDPPLX.js";
-import "./chunk-WGDTG44V.js";
-import "./chunk-THSYN5EK.js";
-import "./chunk-I7UMHYZX.js";
+import "./chunk-EMTGRCSE.js";
+import {
+  setVltJsonOnly
+} from "./chunk-TQQO2F56.js";
 import "./chunk-4KCU2KZL.js";
-import "./chunk-PLG3OYCX.js";
-import "./chunk-5IJTPZXP.js";
+import "./chunk-WGDTG44V.js";
+import {
+  loadPackageJson
+} from "./chunk-E74WGW5C.js";
+import "./chunk-GCTREKA4.js";
+import "./chunk-MCDLJZXT.js";
+import "./chunk-7M2VTFLP.js";
 import {
   getSortedCliOptions,
   getSortedKeys
-} from "./chunk-WF6KLKRN.js";
+} from "./chunk-EFHOWRKU.js";
+import "./chunk-CAV7FKWQ.js";
+import "./chunk-6D3QAFNZ.js";
 import "./chunk-HTOTG4TS.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-U7TEQCBN.js";
+import "./chunk-4GMNWW4C.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-6IF3RJND.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import {
+  isError
+} from "./chunk-BF5DRGRZ.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 
@@ -64,7 +72,7 @@ var loadVlt = async (cwd, argv) => {
   } catch (e) {
     const code = findRootError(e, { code: "ECONFIG" }) ? "ECONFIG" : "JACKSPEAK";
     const err = asRootError(e, { code });
-    const { found, path, wanted, name } = err.cause;
+    const { found, path, wanted, name, cause } = err.cause;
     const isConfigFile = typeof path === "string";
     const msg = isConfigFile ? `Problem in Config File ${path}` : code === "ECONFIG" ? "Config Error" : "Invalid Option Flag";
     const validOptions = wanted || code === "ECONFIG" ? void 0 : isConfigFile ? getSortedKeys() : getSortedCliOptions();
@@ -79,6 +87,7 @@ var loadVlt = async (cwd, argv) => {
       );
     }
     if (wanted) stderr(indent(`Wanted: ${format(wanted)}`));
+    if (isError(cause)) stderr(indent(`Cause: ${cause.message}`));
     if (validOptions) {
       stderr(indent("Valid Options:"));
       stderr(indent(validOptions.join("\n"), 4));
@@ -100,8 +109,9 @@ var run = async () => {
   if (vlt.get("version")) {
     return stdout(version);
   }
+  setVltJsonOnly(vlt.command === "ci");
   const { monorepo } = vlt.options;
-  if (vlt.get("workspace") === void 0) {
+  if (vlt.get("workspace") === void 0 && !vlt.globalRoot) {
     const ws = monorepo?.get(cwd);
     if (ws) {
       vlt.values.workspace = [ws.path];
@@ -109,8 +119,9 @@ var run = async () => {
     }
   }
   if (vlt.command !== "init" && (vlt.get("workspace") || vlt.get("workspace-group")) && ![...monorepo?.values() ?? []].length) {
+    const where = vlt.command === "ci" ? "the vlt.json config (vlt ci ignores package.json and pnpm-workspace.yaml)" : 'the vlt.json config, the "workspaces" field of the root package.json, or the "packages" list of pnpm-workspace.yaml';
     stderr(
-      `Error: No matching workspaces found. Make sure the vlt.json config, the "workspaces" field of the root package.json, or the "packages" list of pnpm-workspace.yaml contains the correct workspaces.`
+      `Error: No matching workspaces found. Make sure ${where} contains the correct workspaces.`
     );
     if (vlt.get("workspace")) {
       stderr(indent(`Workspace: ${format(vlt.get("workspace"))}`));
@@ -125,7 +136,7 @@ var run = async () => {
     return flushAndExit(process.exitCode || 1);
   }
   if (vlt.command === "registry") {
-    const { dispatchRegistry } = await import("./registry-W7BRZZZ2.js");
+    const { dispatchRegistry } = await import("./registry-ZGGWVLBM.js");
     await dispatchRegistry(vlt);
   }
   const command = await loadCommand(vlt.command);

package/{src-I3GMULFP.js → src-QO5G2S4O.js}

@@ -14,6 +14,7 @@ import {
   RegistryClient,
   cacheKey,
   clearRuntimeTokens,
+  defaultRegistryKey,
   deleteToken,
   getKC,
   getToken,
@@ -28,22 +29,23 @@ import {
   runtimeTokens,
   setRuntimeToken,
   setToken
-} from "./chunk-OAJ3PO3Z.js";
-import "./chunk-APMYKJI2.js";
+} from "./chunk-44AWMA4F.js";
+import "./chunk-QNHBAGXQ.js";
+import {
+  userAgent
+} from "./chunk-GEQFMH5M.js";
 import {
   assertOk,
   registryErrorMessage,
   requestError,
   storeRoot
-} from "./chunk-SR2VOY5J.js";
-import {
-  userAgent
-} from "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+} from "./chunk-4GMNWW4C.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-BF5DRGRZ.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 export {
@@ -52,6 +54,7 @@ export {
   assertOk,
   cacheKey,
   clearRuntimeTokens,
+  defaultRegistryKey,
   deleteToken,
   getKC,
   getToken,

package/{src-LUTN2ODD.js → src-W2VQULRG.js}

@@ -28,7 +28,7 @@ import {
   unpackSync,
   unpackToStoreSync,
   verifyStoreEntry
-} from "./chunk-DNRR3XMG.js";
+} from "./chunk-N6HV7JWC.js";
 import {
   cloneAvailable,
   cloneDir
@@ -37,7 +37,7 @@ import {
   rimrafSync
 } from "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-BF5DRGRZ.js";
 import "./chunk-WZWDS3W4.js";
 import "./chunk-PZLD7RTK.js";
 

package/{token-OANOBE3G.js → token-UQNABECH.js}

@@ -9,14 +9,14 @@ globalThis.setInterval = _vlt_setInterval;
 globalThis.clearInterval = _vlt_clearInterval;
 import {createRequire as _vlt_createRequire} from "node:module";
 var require = _vlt_createRequire(import.meta.filename);
-import {
-  requireRegistry
-} from "./chunk-THSYN5EK.js";
 import {
   commandUsage
-} from "./chunk-LHPEBLOU.js";
-import "./chunk-5IJTPZXP.js";
-import "./chunk-WF6KLKRN.js";
+} from "./chunk-HT6FS4VB.js";
+import {
+  requireRegistry
+} from "./chunk-7M2VTFLP.js";
+import "./chunk-EFHOWRKU.js";
+import "./chunk-6D3QAFNZ.js";
 import {
   RegistryClient,
   deleteToken,
@@ -25,15 +25,16 @@ import {
   normalizeRegistryKey,
   registryBase,
   setToken
-} from "./chunk-OAJ3PO3Z.js";
-import "./chunk-APMYKJI2.js";
-import "./chunk-SR2VOY5J.js";
-import "./chunk-ZJMJ7MCT.js";
-import "./chunk-U7TEQCBN.js";
+} from "./chunk-44AWMA4F.js";
+import "./chunk-QNHBAGXQ.js";
+import "./chunk-GEQFMH5M.js";
+import "./chunk-4GMNWW4C.js";
+import "./chunk-SUU2WETN.js";
+import "./chunk-B6RIGNEO.js";
 import "./chunk-XNLSTHDK.js";
 import "./chunk-PDWPFR5T.js";
 import "./chunk-Y5PA7DVK.js";
-import "./chunk-FLH4YC6W.js";
+import "./chunk-BF5DRGRZ.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -168,7 +169,8 @@ var views = {
 var listTokens = async (rc, registry, identity, alias) => {
   const localTok = await getToken(
     normalizeRegistryKey(registry),
-    identity
+    identity,
+    rc.defaultRegistryKey
   );
   if (!localTok) {
     return { registry, alias, tokens: [] };