@vltpkg/cli-sdk 1.0.0-rc.3 → 1.0.0-rc.30

package/dist/commands/view.js

@@ -0,0 +1,334 @@
+import * as dotProp from '@vltpkg/dot-prop';
+import { error } from '@vltpkg/error-cause';
+import { PackageInfoClient } from '@vltpkg/package-info';
+import { SecurityArchive } from '@vltpkg/security-archive';
+import { Spec } from '@vltpkg/spec';
+import { joinDepIDTuple } from '@vltpkg/dep-id';
+import { commandUsage } from "../config/usage.js";
+export const usage = () => commandUsage({
+    command: 'view',
+    usage: [
+        '<pkg>[@<version>] [<field>]',
+        '<pkg>[@<version>] [--view=human | json]',
+    ],
+    description: `View registry information about a package.
+
+      Fetches and displays packument and manifest data for a given
+      package from the registry.
+
+      When a specific field is provided, only that field value is
+      displayed. Use dot-prop syntax to access nested fields
+      (e.g., \`dist-tags.latest\`, \`dependencies.lodash\`).
+
+      Security data from the vlt security archive is shown when
+      available, including scores and alerts.`,
+    examples: {
+        express: {
+            description: 'View info about the latest version of express',
+        },
+        'express@4.18.2': {
+            description: 'View info about a specific version',
+        },
+        'express versions': {
+            description: 'List all published versions',
+        },
+        'express dist-tags': {
+            description: 'Show all dist-tags',
+        },
+        'express dependencies': {
+            description: 'Show dependencies of the latest version',
+        },
+        'express dist-tags.latest': {
+            description: 'Show the latest dist-tag value',
+        },
+    },
+    options: {
+        view: {
+            value: '[human | json]',
+            description: 'Output format. Defaults to human-readable or json if no tty.',
+        },
+    },
+});
+const formatScore = (score) => `${Math.round(score * 100)}/100`;
+const formatAlertSeverity = (severity) => {
+    switch (severity) {
+        case 'critical':
+            return '[CRITICAL]';
+        case 'high':
+            return '[HIGH]';
+        case 'medium':
+            return '[MEDIUM]';
+        case 'low':
+            return '[LOW]';
+        /* c8 ignore next 2 */
+        default:
+            return `[${String(severity).toUpperCase()}]`;
+    }
+};
+const formatSecurity = (report) => {
+    const lines = [];
+    const { score, alerts } = report;
+    lines.push('');
+    lines.push('security:');
+    lines.push(`  score: ${formatScore(score.overall)}`);
+    lines.push(`    license: ${formatScore(score.license)}`);
+    lines.push(`    maintenance: ${formatScore(score.maintenance)}`);
+    lines.push(`    quality: ${formatScore(score.quality)}`);
+    lines.push(`    supply chain: ${formatScore(score.supplyChain)}`);
+    lines.push(`    vulnerability: ${formatScore(score.vulnerability)}`);
+    if (alerts.length > 0) {
+        lines.push(`  alerts: ${alerts.length}`);
+        for (const alert of alerts) {
+            lines.push(`    ${formatAlertSeverity(alert.severity)} ${alert.type}: ${alert.key} (${alert.category})`);
+        }
+    }
+    else {
+        lines.push('  alerts: none');
+    }
+    return lines.join('\n');
+};
+const formatDependencyCount = (manifest) => {
+    const lines = [];
+    const deps = Object.keys(manifest.dependencies ?? {}).length;
+    const devDeps = Object.keys(manifest.devDependencies ?? {}).length;
+    const optDeps = Object.keys(manifest.optionalDependencies ?? {}).length;
+    const peerDeps = Object.keys(manifest.peerDependencies ?? {}).length;
+    const parts = [];
+    if (deps > 0)
+        parts.push(`${deps} dependencies`);
+    if (devDeps > 0)
+        parts.push(`${devDeps} dev`);
+    if (optDeps > 0)
+        parts.push(`${optDeps} optional`);
+    if (peerDeps > 0)
+        parts.push(`${peerDeps} peer`);
+    if (parts.length > 0) {
+        lines.push(`deps: ${parts.join(', ')}`);
+    }
+    return lines;
+};
+const formatHuman = (result) => {
+    const { packument, manifest, security } = result;
+    const lines = [];
+    // Name and version
+    const name = manifest.name ?? packument.name;
+    const version = manifest.version ?? '';
+    lines.push(`${name}@${version}`);
+    // Description
+    if (manifest.description) {
+        lines.push(manifest.description);
+    }
+    lines.push('');
+    // License
+    if (manifest.license) {
+        lines.push(`license: ${manifest.license}`);
+    }
+    // Homepage
+    if (manifest.homepage) {
+        lines.push(`homepage: ${manifest.homepage}`);
+    }
+    // Repository
+    if (manifest.repository) {
+        const repo = typeof manifest.repository === 'string' ?
+            manifest.repository
+            : manifest.repository.url;
+        if (repo) {
+            lines.push(`repository: ${repo}`);
+        }
+    }
+    // Author
+    if (manifest.author) {
+        const author = typeof manifest.author === 'string' ?
+            manifest.author
+            : manifest.author.name;
+        if (author) {
+            lines.push(`author: ${author}`);
+        }
+    }
+    // Keywords
+    if (manifest.keywords) {
+        const kw = Array.isArray(manifest.keywords) ?
+            manifest.keywords
+            : [manifest.keywords];
+        if (kw.length > 0) {
+            lines.push(`keywords: ${kw.join(', ')}`);
+        }
+    }
+    // Dist-tags
+    const tagEntries = Object.entries(packument['dist-tags']);
+    if (tagEntries.length > 0) {
+        lines.push('');
+        lines.push('dist-tags:');
+        for (const [tag, ver] of tagEntries) {
+            lines.push(`  ${tag}: ${ver}`);
+        }
+    }
+    // Dependencies count
+    const depLines = formatDependencyCount(manifest);
+    if (depLines.length > 0) {
+        lines.push('');
+        lines.push(...depLines);
+    }
+    // Maintainers
+    if (packument.maintainers && packument.maintainers.length > 0) {
+        lines.push('');
+        lines.push('maintainers:');
+        for (const m of packument.maintainers) {
+            const mName = typeof m === 'string' ? m : m.name;
+            lines.push(`  - ${mName}`);
+        }
+    }
+    // Published time
+    if (packument.time && version && packument.time[version]) {
+        lines.push('');
+        lines.push(`published: ${packument.time[version]}`);
+    }
+    // Security info
+    if (security) {
+        lines.push(formatSecurity(security));
+    }
+    // Versions count
+    const versionCount = Object.keys(packument.versions).length;
+    if (versionCount > 0) {
+        lines.push('');
+        lines.push(`versions: ${versionCount} total`);
+    }
+    return lines.join('\n');
+};
+export const views = {
+    human: (result, _options, _conf) => {
+        // Field access mode: just return the value
+        if (result.fieldPath !== undefined) {
+            const val = result.fieldValue;
+            if (Array.isArray(val)) {
+                return val.join('\n');
+            }
+            if (typeof val === 'object' && val !== null) {
+                return JSON.stringify(val, null, 2);
+            }
+            if (val === undefined || val === null)
+                return '';
+            return typeof val === 'string' ? val : JSON.stringify(val);
+        }
+        // Full view mode
+        return formatHuman(result);
+    },
+    json: (result, _options, _conf) => {
+        if (result.fieldPath !== undefined) {
+            return result.fieldValue;
+        }
+        return {
+            ...result.manifest,
+            'dist-tags': result.packument['dist-tags'],
+            time: result.packument.time,
+            maintainers: result.packument.maintainers,
+            ...(result.security ? { security: result.security } : {}),
+        };
+    },
+};
+/**
+ * Create a minimal NodeLike for SecurityArchive lookup.
+ * Only the fields used by SecurityArchive.start() are needed.
+ */
+const createFakeNode = (name, version) => ({
+    id: joinDepIDTuple(['registry', '', `${name}@${version}`]),
+    name,
+    version,
+    confused: false,
+    edgesIn: new Set(),
+    edgesOut: new Map(),
+    workspaces: undefined,
+    importer: false,
+    mainImporter: false,
+    projectRoot: '',
+    dev: false,
+    optional: false,
+    graph: {},
+    options: {},
+    /* c8 ignore next 5 - stub methods for NodeLike interface */
+    toJSON: () => ({}),
+    toString: () => `${name}@${version}`,
+    setResolved: () => { },
+    setConfusedManifest: () => { },
+    maybeSetConfusedManifest: () => { },
+});
+/**
+ * Lookup fields from a combined packument+manifest view.
+ *
+ * The lookup searches in this order:
+ * 1. Top-level packument fields (name, dist-tags, versions, time,
+ *    readme, maintainers)
+ * 2. Manifest fields for the resolved version
+ * 3. Security data (security.score, security.alerts)
+ */
+const lookupField = (result, path) => {
+    // Special handling for packument-level fields
+    const packumentFields = [
+        'dist-tags',
+        'versions',
+        'time',
+        'readme',
+        'maintainers',
+        'modified',
+        'contributors',
+    ];
+    /* c8 ignore next - split always returns at least one element */
+    const topLevel = path.split('.')[0] ?? path;
+    if (packumentFields.includes(topLevel)) {
+        return dotProp.get(result.packument, path);
+    }
+    // Check security namespace
+    if (topLevel === 'security' && result.security) {
+        const subPath = path.slice('security.'.length);
+        if (subPath === '' || path === 'security') {
+            return result.security;
+        }
+        return dotProp.get(result.security, subPath);
+    }
+    // Default: look up in manifest
+    return dotProp.get(result.manifest, path);
+};
+export const command = async (conf) => {
+    const specArg = conf.positionals[0];
+    if (!specArg) {
+        throw error('view requires a package spec argument', {
+            code: 'EUSAGE',
+        });
+    }
+    const fieldPath = conf.positionals[1];
+    const spec = Spec.parseArgs(specArg, conf.options);
+    const pic = new PackageInfoClient(conf.options);
+    // Fetch the packument and resolved manifest
+    const [packument, resolvedManifest] = await Promise.all([
+        pic.packument(spec),
+        pic.manifest(spec),
+    ]);
+    const manifest = resolvedManifest;
+    // Try to get security data for this package
+    let security;
+    const name = manifest.name ?? packument.name;
+    const version = manifest.version;
+    if (name && version) {
+        try {
+            const node = createFakeNode(name, version);
+            const archive = await SecurityArchive.start({
+                nodes: [node],
+            });
+            security = archive.get(node.id);
+        }
+        catch {
+            // Security data is optional, don't fail the command
+        }
+    }
+    const result = {
+        packument,
+        manifest,
+        security,
+    };
+    // If a field path is provided, resolve it
+    if (fieldPath !== undefined) {
+        result.fieldPath = fieldPath;
+        result.fieldValue = lookupField(result, fieldPath);
+    }
+    return result;
+};

package/dist/{esm/commands → commands}/whoami.d.ts

@@ -10,4 +10,3 @@ export declare const views: {
 };
 export declare const command: CommandFn<CommandResult>;
 export {};
-//# sourceMappingURL=whoami.d.ts.map

package/dist/{esm/commands → commands}/whoami.js

@@ -5,6 +5,16 @@ export const usage = () => commandUsage({
     usage: [''],
     description: `Look up the username for the currently active token,
                   when logged into a registry.`,
+    options: {
+        registry: {
+            value: '<url>',
+            description: 'Registry URL to query for authenticated user info.',
+        },
+        identity: {
+            value: '<name>',
+            description: 'Identity namespace used to look up auth tokens.',
+        },
+    },
 });
 export const views = {
     human: r => r.username,
@@ -16,4 +26,3 @@ export const command = async (conf) => {
     const { username } = response.json();
     return { username };
 };
-//# sourceMappingURL=whoami.js.map

package/dist/{esm/config → config}/definition.d.ts

@@ -15,17 +15,23 @@ export declare const commands: {
     readonly r: "run";
     readonly 'run-script': "run";
     readonly rx: "run-exec";
-    readonly s: "serve";
     readonly x: "exec";
     readonly xl: "exec-local";
     readonly h: "help";
     readonly '?': "help";
+    readonly info: "view";
     readonly ls: "list";
+    readonly show: "view";
     readonly xc: "exec-cache";
+    readonly access: "access";
+    readonly bugs: "bugs";
     readonly build: "build";
     readonly cache: "cache";
     readonly ci: "ci";
     readonly config: "config";
+    readonly create: "create";
+    readonly deprecate: "deprecate";
+    readonly 'dist-tag': "dist-tag";
     readonly docs: "docs";
     readonly exec: "exec";
     readonly 'exec-local': "exec-local";
@@ -36,17 +42,21 @@ export declare const commands: {
     readonly logout: "logout";
     readonly list: "list";
     readonly pack: "pack";
+    readonly ping: "ping";
     readonly pkg: "pkg";
+    readonly profile: "profile";
     readonly publish: "publish";
     readonly query: "query";
+    readonly repo: "repo";
     readonly 'run-exec': "run-exec";
     readonly run: "run";
-    readonly serve: "serve";
     readonly token: "token";
     readonly uninstall: "uninstall";
+    readonly unpublish: "unpublish";
     readonly update: "update";
     readonly 'exec-cache': "exec-cache";
     readonly version: "version";
+    readonly view: "view";
     readonly whoami: "whoami";
 };
 /**
@@ -58,7 +68,7 @@ export declare const getCommand: (s?: string) => Commands[keyof Commands] | unde
 /**
  * Fields that are parsed as a set of key=value pairs
  */
-export declare const recordFields: readonly ["git-hosts", "registries", "git-host-archives", "scope-registries", "jsr-registries"];
+export declare const recordFields: readonly ["git-hosts", "registries", "git-host-archives", "scoped-registries", "jsr-registries"];
 export type RecordField = (typeof recordFields)[number];
 export declare const isRecordField: (s: string) => s is RecordField;
 export declare const definition: import("jackspeak").Jack<{
@@ -86,7 +96,7 @@ export declare const definition: import("jackspeak").Jack<{
         hint: string;
         description: string;
     };
-    'scope-registries': {
+    'scoped-registries': {
         hint: string;
         description: string;
     };
@@ -106,7 +116,7 @@ export declare const definition: import("jackspeak").Jack<{
     };
 } & {
     registries: import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
-    'scope-registries': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
+    'scoped-registries': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
     'jsr-registries': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
     'git-hosts': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
     'git-host-archives': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
@@ -132,6 +142,9 @@ export declare const definition: import("jackspeak").Jack<{
         description: string;
         default: NodeJS.Architecture;
     };
+    libc: {
+        description: string;
+    };
     'node-version': {
         hint: string;
         description: string;
@@ -143,6 +156,7 @@ export declare const definition: import("jackspeak").Jack<{
     before: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
     os: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
     arch: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
+    libc: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
     'node-version': import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
 } & {
     'git-shallow': {
@@ -199,7 +213,6 @@ export declare const definition: import("jackspeak").Jack<{
         description: string;
     };
     'workspace-group': {
-        short: string;
         description: string;
     };
 } & {
@@ -277,12 +290,19 @@ export declare const definition: import("jackspeak").Jack<{
     };
 } & {
     package: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
+} & {
+    call: {
+        hint: string;
+        description: string;
+    };
+} & {
+    call: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
 } & {
     view: {
         hint: string;
         default: string;
         description: string;
-        validOptions: readonly ["human", "json", "mermaid", "gui", "inspect", "silent"];
+        validOptions: readonly ["human", "json", "mermaid", "svg", "png", "count", "inspect", "silent"];
     };
 } & {
     view: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
@@ -326,6 +346,10 @@ export declare const definition: import("jackspeak").Jack<{
     'dry-run': {
         description: string;
     };
+    force: {
+        short: string;
+        description: string;
+    };
     'expect-lockfile': {
         description: string;
     };
@@ -337,6 +361,7 @@ export declare const definition: import("jackspeak").Jack<{
     };
 } & {
     'dry-run': import("jackspeak").ConfigOption<"boolean", false, undefined>;
+    force: import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'expect-lockfile': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'frozen-lockfile': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'lockfile-only': import("jackspeak").ConfigOption<"boolean", false, undefined>;
@@ -351,7 +376,6 @@ export declare const definition: import("jackspeak").Jack<{
     access: {
         description: string;
         validOptions: readonly ["public", "restricted"];
-        default: string;
     };
 } & {
     access: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
@@ -363,19 +387,16 @@ export declare const definition: import("jackspeak").Jack<{
         hint: string;
         description: string;
     };
-    port: {
-        hint: string;
-        description: string;
-    };
-    'registry-port': {
-        hint: string;
-        description: string;
-    };
 } & {
     otp: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
     'publish-directory': import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
-    port: import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
-    'registry-port': import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
+} & {
+    telemetry: {
+        description: string;
+        default: true;
+    };
+} & {
+    telemetry: import("jackspeak").ConfigOption<"boolean", false, undefined>;
 } & {
     yes: {
         short: string;
@@ -401,4 +422,3 @@ export declare const definition: import("jackspeak").Jack<{
 }>;
 export declare const getSortedCliOptions: () => string[];
 export declare const getSortedKeys: () => string[];
-//# sourceMappingURL=definition.d.ts.map