@vltpkg/cli-sdk 1.0.4 → 1.0.6

package/dist/commands/ci.d.ts

@@ -2,6 +2,7 @@ import type { CommandFn, CommandUsage } from '../index.ts';
 import type { InstallResult } from './install.ts';
 export type CIResult = Omit<InstallResult, 'buildQueue'>;
 export declare const needsRegistry = true;
+export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const views: {
     readonly json: (i: CIResult) => import("@vltpkg/graph").LockfileData;

package/dist/commands/ci.js

@@ -2,6 +2,7 @@ import { install } from '@vltpkg/graph';
 import { commandUsage } from "../config/usage.js";
 import { lazyView } from "../view.js";
 export const needsRegistry = true;
+export const needsNpmRegistry = true;
 export const usage = () => commandUsage({
     command: 'ci',
     usage: '',

package/dist/commands/deprecate.js

@@ -127,7 +127,7 @@ export const command = async (conf) => {
             cause: asError(err),
         });
     }
-    if (response.statusCode !== 200 && response.statusCode !== 201) {
+    if (response.statusCode < 200 || response.statusCode >= 300) {
         throw error('failed to update deprecation status', {
             url: packageUrl,
             response,

package/dist/commands/exec.d.ts

@@ -3,6 +3,7 @@ import type { ExecResult } from '../exec-command.ts';
 import type { CommandFn, CommandUsage } from '../index.ts';
 export { views } from '../exec-command.ts';
 export declare const needsRegistry = true;
+export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const prettyPath: (path: string) => string;
 export declare const promptFn: PromptFn;

package/dist/commands/exec.js

@@ -8,6 +8,7 @@ import { ExecCommand } from "../exec-command.js";
 import { styleTextStdout } from "../output.js";
 export { views } from "../exec-command.js";
 export const needsRegistry = true;
+export const needsNpmRegistry = true;
 export const usage = () => commandUsage({
     command: 'exec',
     usage: '[--package=<pkg>] [--call=<cmd>] [command...]',

package/dist/commands/install.d.ts

@@ -19,6 +19,7 @@ export type InstallResult = {
     diff?: Diff;
 };
 export declare const needsRegistry = true;
+export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const views: {
     readonly json: (i: InstallResult) => {

package/dist/commands/install.js

@@ -4,6 +4,7 @@ import { parseAddArgs } from "../parse-add-remove-args.js";
 import { trackInstall } from "../telemetry.js";
 import { lazyView } from "../view.js";
 export const needsRegistry = true;
+export const needsNpmRegistry = true;
 export const usage = () => commandUsage({
     command: 'install',
     usage: '[packages ...]',

package/dist/commands/publish.js

@@ -13,6 +13,7 @@ import { createHostContextsMap } from "../query-host-contexts.js";
 import { minimatch } from 'minimatch';
 import { resolveRegistry } from "../require-registry.js";
 import { registryErrorMessage } from "../registry-error-message.js";
+import { stderr } from "../output.js";
 export const needsRegistry = true;
 export const usage = () => commandUsage({
     command: 'publish',
@@ -264,7 +265,10 @@ const commandSingle = async (location, conf) => {
                 cause: asError(err),
             });
         }
-        if (response.statusCode !== 200 && response.statusCode !== 201) {
+        // Any 2xx response is a successful publish. The npm registry may
+        // respond with a 202 Accepted when processing is deferred (e.g. for
+        // publish-time malware scanning).
+        if (response.statusCode < 200 || response.statusCode >= 300) {
             let advice = '';
             if (response.statusCode === 409) {
                 advice = `\n⚠️ ${name}@${version} already exists in the registry. Bump the version and try again.`;
@@ -278,6 +282,12 @@ const commandSingle = async (location, conf) => {
                 response,
             });
         }
+        // On deferred publishes the registry explains the delay in an
+        // npm-notice header, e.g. "Your package is being processed and may
+        // take a few minutes to become available."
+        const notice = response.getHeaderString('npm-notice');
+        if (notice)
+            stderr(`⚠️ ${notice}`);
     }
     await run({
         ...runOptions,

package/dist/commands/uninstall.d.ts

@@ -7,6 +7,7 @@ export type UninstallResult = {
     graph: Graph;
 };
 export declare const needsRegistry = true;
+export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const views: {
     readonly json: (i: UninstallResult) => import("@vltpkg/graph").LockfileData;

package/dist/commands/uninstall.js

@@ -3,6 +3,7 @@ import { commandUsage } from "../config/usage.js";
 import { parseRemoveArgs } from "../parse-add-remove-args.js";
 import { lazyView } from "../view.js";
 export const needsRegistry = true;
+export const needsNpmRegistry = true;
 export const usage = () => commandUsage({
     command: 'uninstall',
     usage: '[package ...]',

package/dist/commands/unpublish.js

@@ -141,7 +141,7 @@ export const command = async (conf) => {
                 cause: asError(err),
             });
         }
-        if (response.statusCode !== 200 && response.statusCode !== 201) {
+        if (response.statusCode < 200 || response.statusCode >= 300) {
             throw error('Failed to unpublish package version', {
                 url: putUrl,
                 response,
@@ -188,7 +188,7 @@ export const command = async (conf) => {
                 cause: asError(err),
             });
         }
-        if (response.statusCode !== 200 && response.statusCode !== 201) {
+        if (response.statusCode < 200 || response.statusCode >= 300) {
             throw error('Failed to unpublish package', {
                 url: deleteUrl,
                 response,

package/dist/commands/update.d.ts

@@ -1,6 +1,7 @@
 import type { CommandFn, CommandUsage } from '../index.ts';
 import type { InstallResult } from './install.ts';
 export declare const needsRegistry = true;
+export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const views: {
     readonly json: (i: InstallResult) => {

package/dist/commands/update.js

@@ -3,6 +3,7 @@ import { error } from '@vltpkg/error-cause';
 import { commandUsage } from "../config/usage.js";
 import { lazyView } from "../view.js";
 export const needsRegistry = true;
+export const needsNpmRegistry = true;
 export const usage = () => commandUsage({
     command: 'update',
     usage: '',

package/dist/load-command.d.ts

@@ -17,5 +17,13 @@ export type Command<T> = {
      * early with an `ECONFIG` error when one of these runs unconfigured.
      */
     needsRegistry?: boolean;
+    /**
+     * Set to `true` by commands that install packages (`install`,
+     * `update`, `uninstall`, `ci`, `exec`/`vlx`). `outputCommand()`
+     * fails early with an `ECONFIG` error when the alias bare specs
+     * resolve through (`registries.npm`, or the alias named by
+     * `default-registry-alias`) is not configured.
+     */
+    needsNpmRegistry?: boolean;
 };
 export declare const loadCommand: <T>(command: Commands[keyof Commands] | undefined) => Promise<Command<T>>;

package/dist/output.js

@@ -2,7 +2,7 @@ import { formatWithOptions, styleText as utilStyleText, } from 'node:util';
 import { createSupportsColor } from 'supports-color';
 import { defaultView } from "./config/definition.js";
 import { printErr, formatOptions } from "./print-err.js";
-import { hasConfiguredRegistry, missingRegistryError, } from "./require-registry.js";
+import { hasConfiguredRegistry, hasNpmRegistry, missingNpmRegistryError, missingRegistryError, } from "./require-registry.js";
 import { isLazyView, isViewClass, loadLazyView } from "./view.js";
 import { generateDefaultHelp, generateFullHelp, } from "./custom-help.js";
 import { flush as flushTelemetry, trackCommand, trackError, } from "./telemetry.js";
@@ -103,7 +103,7 @@ const startView = async (conf, opts, views, { start } = { start: Date.now() }) =
 export const outputCommand = async (cliCommand, conf, { start, vltVersion } = {
     start: Date.now(),
 }) => {
-    const { usage, views, command, needsRegistry } = cliCommand;
+    const { usage, views, command, needsRegistry, needsNpmRegistry } = cliCommand;
     const stdoutColor = conf.values.color ?? supportsColor(process.stdout);
     const stderrColor = conf.values.color ?? supportsColor(process.stderr);
     if (conf.values.help) {
@@ -140,6 +140,9 @@ export const outputCommand = async (cliCommand, conf, { start, vltVersion } = {
         if (needsRegistry && !hasConfiguredRegistry(conf)) {
             throw missingRegistryError();
         }
+        if (needsNpmRegistry && !hasNpmRegistry(conf)) {
+            throw missingNpmRegistryError(conf.options['default-registry-alias']);
+        }
         const output = await onDone(await command(conf));
         stopRequestLog();
         const duration_ms = Date.now() - start;

package/dist/require-registry.d.ts

@@ -5,6 +5,13 @@ import type { LoadedConfig } from './config/index.ts';
  * everywhere a registry is required but missing.
  */
 export declare const missingRegistryError: () => Error;
+/**
+ * Install-related commands need the alias that bare specs resolve
+ * through (not merely some other configured registry) so packages and
+ * transitive deps get stable, alias-keyed DepIDs. That alias is
+ * `registries.npm` unless `default-registry-alias` points elsewhere.
+ */
+export declare const missingNpmRegistryError: (alias?: string) => Error;
 /**
  * Multiple registries are configured and none was selected. Used in
  * non-interactive contexts where we cannot prompt and there is no
@@ -25,6 +32,15 @@ export declare const resolveRegistryAlias: (conf: LoadedConfig, alias: string) =
  * the resolver would otherwise accept or prompt for.
  */
 export declare const hasConfiguredRegistry: (conf: LoadedConfig) => boolean;
+/**
+ * Whether the alias bare specs resolve through is configured:
+ * `registries.npm` by default, or whatever `default-registry-alias`
+ * points at. A scalar `--registry` or some unrelated alias is not
+ * enough: install-related commands need the default alias itself.
+ * Kept next to {@link hasConfiguredRegistry} so both pre-command
+ * gates share the same config surface.
+ */
+export declare const hasNpmRegistry: (conf: LoadedConfig) => boolean;
 /**
  * Synchronous, non-interactive registry resolution used by
  * programmatic callers. Precedence: explicit alias > `--registry`

package/dist/require-registry.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { defaultRegistries } from '@vltpkg/spec';
+import { defaultRegistries, defaultRegistryName } from '@vltpkg/spec';
 import { selectRegistry } from "./select-registry.js";
 /**
  * There is no default registry. This is the single message used
@@ -12,6 +12,20 @@ export const missingRegistryError = () => error([
     '',
     'See https://docs.vlt.sh/cli for other ways to set a registry.',
 ].join('\n'), { code: 'ECONFIG' });
+/**
+ * Install-related commands need the alias that bare specs resolve
+ * through (not merely some other configured registry) so packages and
+ * transitive deps get stable, alias-keyed DepIDs. That alias is
+ * `registries.npm` unless `default-registry-alias` points elsewhere.
+ */
+export const missingNpmRegistryError = (alias = defaultRegistryName) => error([
+    `Missing ${alias} registry configuration.`,
+    '',
+    `Install commands require the \`registries.${alias}\` alias.`,
+    'Run `vlt setup` to get configured.',
+    '',
+    'See https://docs.vlt.sh/cli for other ways to set a registry.',
+].join('\n'), { code: 'ECONFIG' });
 /**
  * Multiple registries are configured and none was selected. Used in
  * non-interactive contexts where we cannot prompt and there is no
@@ -68,6 +82,15 @@ const gatherCandidates = (conf) => {
  * the resolver would otherwise accept or prompt for.
  */
 export const hasConfiguredRegistry = (conf) => !!conf.options.registry || gatherCandidates(conf).length > 0;
+/**
+ * Whether the alias bare specs resolve through is configured:
+ * `registries.npm` by default, or whatever `default-registry-alias`
+ * points at. A scalar `--registry` or some unrelated alias is not
+ * enough: install-related commands need the default alias itself.
+ * Kept next to {@link hasConfiguredRegistry} so both pre-command
+ * gates share the same config surface.
+ */
+export const hasNpmRegistry = (conf) => !!conf.options.registries[conf.options['default-registry-alias']];
 /**
  * Synchronous, non-interactive registry resolution used by
  * programmatic callers. Precedence: explicit alias > `--registry`

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/cli-sdk",
   "description": "The source for the vlt CLI",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",
@@ -14,30 +14,30 @@
   },
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2",
-    "@vltpkg/config": "1.0.4",
-    "@vltpkg/dep-id": "1.0.4",
-    "@vltpkg/dot-prop": "1.0.4",
-    "@vltpkg/error-cause": "1.0.4",
-    "@vltpkg/git": "1.0.4",
-    "@vltpkg/graph": "1.0.4",
-    "@vltpkg/graph-run": "1.0.4",
-    "@vltpkg/init": "1.0.4",
-    "@vltpkg/output": "1.0.4",
-    "@vltpkg/package-info": "1.0.4",
-    "@vltpkg/package-json": "1.0.4",
-    "@vltpkg/promise-spawn": "1.0.4",
-    "@vltpkg/query": "1.0.4",
-    "@vltpkg/registry-client": "1.0.4",
-    "@vltpkg/rollback-remove": "1.0.4",
-    "@vltpkg/run": "1.0.4",
-    "@vltpkg/security-archive": "1.0.4",
-    "@vltpkg/spec": "1.0.4",
-    "@vltpkg/types": "1.0.4",
-    "@vltpkg/url-open": "1.0.4",
-    "@vltpkg/vlt-json": "1.0.4",
-    "@vltpkg/vlx": "1.0.4",
-    "@vltpkg/workspaces": "1.0.4",
-    "@vltpkg/xdg": "1.0.4",
+    "@vltpkg/config": "1.0.6",
+    "@vltpkg/dep-id": "1.0.6",
+    "@vltpkg/dot-prop": "1.0.6",
+    "@vltpkg/error-cause": "1.0.6",
+    "@vltpkg/git": "1.0.6",
+    "@vltpkg/graph": "1.0.6",
+    "@vltpkg/graph-run": "1.0.6",
+    "@vltpkg/init": "1.0.6",
+    "@vltpkg/output": "1.0.6",
+    "@vltpkg/package-info": "1.0.6",
+    "@vltpkg/package-json": "1.0.6",
+    "@vltpkg/promise-spawn": "1.0.6",
+    "@vltpkg/query": "1.0.6",
+    "@vltpkg/registry-client": "1.0.6",
+    "@vltpkg/rollback-remove": "1.0.6",
+    "@vltpkg/run": "1.0.6",
+    "@vltpkg/security-archive": "1.0.6",
+    "@vltpkg/spec": "1.0.6",
+    "@vltpkg/types": "1.0.6",
+    "@vltpkg/url-open": "1.0.6",
+    "@vltpkg/vlt-json": "1.0.6",
+    "@vltpkg/vlx": "1.0.6",
+    "@vltpkg/workspaces": "1.0.6",
+    "@vltpkg/xdg": "1.0.6",
     "ansi-to-pre": "^1.0.6",
     "beautiful-mermaid": "^1.1.3",
     "chalk": "^5.6.2",