@vltpkg/cli-sdk 1.3.8 → 1.5.0

package/dist/config/definition.d.ts

@@ -53,6 +53,7 @@ export declare const commands: {
     readonly 'run-exec': "run-exec";
     readonly run: "run";
     readonly setup: "setup";
+    readonly skills: "skills";
     readonly token: "token";
     readonly uninstall: "uninstall";
     readonly unpublish: "unpublish";
@@ -75,7 +76,7 @@ export declare const recordFields: readonly ["git-hosts", "registries", "git-hos
 export type RecordField = (typeof recordFields)[number];
 export declare const isRecordField: (s: string) => s is RecordField;
 /** Valid `store-linker` values. */
-export declare const storeLinkers: readonly ["auto", "hardlink", "copy", "unpack"];
+export declare const storeLinkers: readonly ["auto", "hardlink", "clone", "copy", "unpack"];
 export declare const definition: import("jackspeak").Jack<{
     color: {
         short: string;
@@ -139,7 +140,7 @@ export declare const definition: import("jackspeak").Jack<{
     'store-linker': {
         hint: string;
         description: string;
-        validOptions: readonly ["auto", "hardlink", "copy", "unpack"];
+        validOptions: readonly ["auto", "hardlink", "clone", "copy", "unpack"];
         default: string;
     };
     tag: {
@@ -365,16 +366,25 @@ export declare const definition: import("jackspeak").Jack<{
         short: string;
         description: string;
     };
+    'save-types': {
+        description: string;
+    };
     'save-config': {
         description: string;
     };
+    'migrate-workspaces': {
+        description: string;
+        default: true;
+    };
 } & {
     'save-dev': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'save-exact': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'save-optional': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'save-peer': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'save-prod': import("jackspeak").ConfigOption<"boolean", false, undefined>;
+    'save-types': import("jackspeak").ConfigOption<"boolean", false, undefined>;
     'save-config': import("jackspeak").ConfigOption<"boolean", false, undefined>;
+    'migrate-workspaces': import("jackspeak").ConfigOption<"boolean", false, undefined>;
 } & {
     'save-prefix': {
         description: string;
@@ -425,6 +435,20 @@ export declare const definition: import("jackspeak").Jack<{
     };
 } & {
     'allow-scripts': import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
+} & {
+    'allow-skills': {
+        hint: string;
+        description: string;
+    };
+} & {
+    'allow-skills': import("jackspeak").ConfigOption<"string", false, readonly string[] | undefined>;
+} & {
+    'skills-dir': {
+        hint: string;
+        description: string;
+    };
+} & {
+    'skills-dir': import("jackspeak").ConfigOption<"string", true, readonly string[] | undefined>;
 } & {
     access: {
         description: string;

package/dist/config/definition.js

@@ -46,6 +46,7 @@ const canonicalCommands = {
     'run-exec': 'run-exec',
     run: 'run',
     setup: 'setup',
+    skills: 'skills',
     token: 'token',
     uninstall: 'uninstall',
     unpublish: 'unpublish',
@@ -114,6 +115,7 @@ export const isRecordField = (s) => recordFields.includes(s);
 export const storeLinkers = [
     'auto',
     'hardlink',
+    'clone',
     'copy',
     'unpack',
 ];
@@ -226,8 +228,11 @@ export const definition = j
 
                     There is **no** built-in \`npm\` registry URL; the \`npm\`
                     alias must be configured (e.g. via \`vlt setup\`) before it
-                    can be used. The \`gh\` and \`jsr\` aliases have built-in
-                    defaults that can be overridden here.
+                    can be used. The \`gh\` alias has a built-in default
+                    that can be overridden here. A name used by
+                    \`--jsr-registries\` or \`--git-hosts\` (e.g. \`jsr\`,
+                    \`github\`), or a built-in protocol (e.g. \`file\`), is
+                    an error.
 
                     Aliases given on the command line or in
                     \`VLT_REGISTRIES\` (newline-delimited) merge with the
@@ -317,28 +322,35 @@ export const definition = j
         default: cacheDir,
     },
     'store-linker': {
-        hint: 'auto | hardlink | copy | unpack',
+        hint: 'auto | hardlink | clone | copy | unpack',
         description: `How packages are placed in \`node_modules\`. Every
                     linker but \`unpack\` fills a global store under
                     \`cache\` in the background, then places packages
                     from it.
 
                     - auto: Default. On Linux, hardlink from the global
-                      store, copying any file that cannot be linked.
-                      Elsewhere, same as \`unpack\`: a hardlink is the
-                      slowest way to place a file on APFS, so macOS and
-                      Windows unpack by default.
+                      store, copying any file that cannot be linked. On
+                      macOS, clone from it, on a Node with \`node:ffi\`
+                      (26.1 and later, and \`--allow-ffi\` under
+                      \`--permission\`); a hardlink is the slowest way
+                      to place a file on APFS, so macOS without it, and
+                      Windows, unpack by default.
                     - hardlink: Hardlink from the global store on every
                       platform.
+                    - clone: Clone each package directory from the
+                      global store copy-on-write (\`clonefile\`, macOS
+                      on APFS). Files share storage with the store
+                      until edited, so editing in place is safe.
+                      Unpacks where cloning fails.
                     - copy: Copy from the global store. Use this when
                       editing files in \`node_modules\` in place, since
                       a hardlink shares its content with every project.
                     - unpack: Unpack each package tarball, skipping the
                       global store.
 
-                    A package is copied right before its install
-                    scripts run, so they don't change its files in the
-                    store.
+                    A hardlinked package is copied right before its
+                    install scripts run, so they don't change its files
+                    in the store; a cloned one needs no copy.
                     An invalid \`VLT_STORE_LINKER\` warns and uses
                     \`unpack\`.`,
         validOptions: storeLinkers,
@@ -514,7 +526,9 @@ export const definition = j
     config: {
         hint: 'all | user | project',
         description: `Specify which configuration to show or operate on when running
-                    \`vlt config\` commands. For read operations (get, pick, list):
+                    \`vlt config\` commands, and which file
+                    \`vlt skills link\` saves \`allow-skills\` to. For read
+                    operations (get, pick, list):
                     \`all\` shows merged configuration from both user and project
                     files (default). For write operations (set, delete, edit):
                     defaults to \`project\`. \`user\` shows/modifies only user-level
@@ -702,6 +716,11 @@ export const definition = j
                     devDependencies or optionalDependencies, but you want to
                     move it to be a non-optional production dependency.`,
     },
+    'save-types': {
+        description: `Also save the matching \`@types/*\` package as a
+                    devDependency for each added registry package that
+                    ships no TypeScript types of its own.`,
+    },
     'save-config': {
         description: `Save the registry and git host options given on the
                     command line or via \`VLT_*\` env (\`--registry\`,
@@ -713,6 +732,17 @@ export const definition = j
                     \`add\` or \`update\`. Values a config file already
                     has are left alone.`,
     },
+    'migrate-workspaces': {
+        description: `Save workspaces read from the \`workspaces\` field of
+                    the root \`package.json\` or from
+                    \`pnpm-workspace.yaml\` to the project \`vlt.json\` on
+                    \`vlt install\`. \`vlt.json\` then takes precedence.
+
+                    Set \`--no-migrate-workspaces\` to skip this; an
+                    already saved \`workspaces\` field stays until
+                    removed.`,
+        default: true,
+    },
 })
     .opt({
     'save-prefix': {
@@ -780,6 +810,40 @@ export const definition = j
                     Runs scripts only for direct dependencies of the current project and any occurrences
                     of a specific dependency with the name "my-package" anywhere in the dependency graph.`,
     },
+})
+    .opt({
+    'allow-skills': {
+        hint: 'query',
+        description: `Link the agent skills (folders with a \`SKILL.md\`) shipped by
+                    installed packages matching this DSS query into
+                    the project's agent skill dirs (see \`skills-dir\`)
+                    after \`install\`, \`ci\`, \`update\` or
+                    \`uninstall\`. End a selector with
+                    \`:skill(<name>, …)\` to pick single skills (\`*\`
+                    globs, double-quoted names). Unset (the default) or
+                    \`:not(*)\` links nothing and skips all skills work.
+
+                    \`vlt install --allow-skills=<query>\` saves the query
+                    to the project \`vlt.json\`; \`vlt skills link
+                    [<query>]\` sets, saves and applies it.
+
+                    Example: --allow-skills="#agent-browser:skill(agent-browser)"
+                    Links the agent-browser skill from a package with the same name.`,
+    },
+})
+    .optList({
+    'skills-dir': {
+        hint: 'path',
+        description: `Dirs to link agent skills into (see \`allow-skills\`),
+                    relative to the project root. Replaces detection:
+                    \`.agents/skills\`, plus \`<folder>/skills\` for each
+                    agent folder at the project root (e.g. \`.claude/\`),
+                    \`.claude/skills\` inside Claude Code, and existing
+                    \`.<name>/skills\` dirs. An empty list (\`[]\` in
+                    vlt.json, or \`--skills-dir=\`) links nothing. Each
+                    dir must be inside the project, not in
+                    node_modules.`,
+    },
 })
     .opt({
     access: {

package/dist/config/index.d.ts

@@ -85,6 +85,8 @@ export type ConfigOptions = ConfigOptionsNoExtras & Pick<SpecOptions, 'catalog'
     storeRoot: string;
     monorepo?: Monorepo;
     packageInfo: PackageInfoClient;
+    /** aborted when the command fails */
+    signal: AbortSignal;
 };
 /**
  * The base config definition set as a type
@@ -125,6 +127,8 @@ export declare class Config {
      * to recalculate the options.
      */
     resetOptions(projectRoot?: string): void;
+    /** Abort requests still in flight */
+    abort(): void;
     /**
      * positional arguments to the vlt process
      */

package/dist/config/index.js

@@ -24,6 +24,7 @@ import { error } from '@vltpkg/error-cause';
 import { PackageInfoClient } from '@vltpkg/package-info';
 import { PackageJson } from '@vltpkg/package-json';
 import { storeRoot } from '@vltpkg/registry-client/store-root';
+import { cloneAvailable } from '@vltpkg/tar/clonefile';
 import { resetCaches } from '@vltpkg/dep-id';
 import { getOptions } from '@vltpkg/spec';
 import { assertRecordStringString, assertRecordStringT, isObject, isRecordStringString, } from '@vltpkg/types';
@@ -35,6 +36,7 @@ import { PathScurry } from 'path-scurry';
 import { commands, definition, defaultValues, getCommand, isRecordField, recordFields, storeLinkers, } from "./definition.js";
 import { merge } from "./merge.js";
 import { cloneLayer, mergeLayers } from "./merge-layers.js";
+import { assertSpecAliases } from "./spec-aliases.js";
 export { commands, definition, isRecordField, recordFields, };
 export const kCustomInspect = Symbol.for('nodejs.util.inspect.custom');
 // turn a set of pairs into a Record object.
@@ -172,6 +174,7 @@ export class Config {
         const asRecords = pairsToRecords(this.parse().values);
         const extras = {
             projectRoot: this.projectRoot,
+            signal: this.#abort.signal,
             storeRoot: storeRoot(asRecords.cache),
             scurry,
             packageJson,
@@ -197,7 +200,8 @@ export class Config {
                 return Object.fromEntries(Object.entries(options).filter(([k]) => k !== 'monorepo' &&
                     k !== 'scurry' &&
                     k !== 'packageJson' &&
-                    k !== 'packageInfo'));
+                    k !== 'packageInfo' &&
+                    k !== 'signal'));
             },
         });
         return this.#options;
@@ -213,6 +217,11 @@ export class Config {
     }
     // memoized options() getter value
     #options;
+    #abort = new AbortController();
+    /** Abort requests still in flight */
+    abort() {
+        this.#abort.abort();
+    }
     /**
      * positional arguments to the vlt process
      */
@@ -277,13 +286,16 @@ export class Config {
         // ok, applied cmd-specific defaults, do rest of the parse
         this.jack.applyDefaults(p);
         // `auto` only hardlinks from the global store on linux: on APFS a
-        // hardlink is the slowest way to place a file, so darwin and win32
-        // unpack by default. the env layer is rewritten too, so `explicit`
-        // records the resolved value.
+        // hardlink is the slowest way to place a file, so darwin clones
+        // instead, when its node can load `node:ffi` to call clonefile(2)
+        // with, and win32 (and darwin without it) unpack by default. the
+        // env layer is rewritten too, so `explicit` records the resolved
+        // value.
         if (p.values['store-linker'] === 'auto' &&
             process.platform !== 'linux') {
-            p.values['store-linker'] = 'unpack';
-            envValues['store-linker'] = 'unpack';
+            const linker = cloneAvailable() ? 'clone' : 'unpack';
+            p.values['store-linker'] = linker;
+            envValues['store-linker'] = linker;
         }
         // what was set on the cli or env for this run. record fields hold
         // only those pairs, env then cli, so later ones win per key.
@@ -317,6 +329,10 @@ export class Config {
             const base = (k in cmdPairs ? cmdPairs[k] : fileValues[k]) ?? [];
             values[k] = dedupePairs([...base, ...pairs]);
         }
+        // skipped for `vlt config`, so a bad alias can be removed
+        if (cmdOrFallback !== 'config') {
+            assertSpecAliases(pairsToRecords(p.values));
+        }
         this.jack.writeEnv(p);
         process.env[kParentEnv] = JSON.stringify({
             explicit,

package/dist/config/spec-aliases.d.ts

@@ -0,0 +1,22 @@
+declare const builtins: {
+    registries: {
+        gh: string;
+    };
+    'jsr-registries': {
+        jsr: string;
+    };
+    'git-hosts': {
+        github: string;
+        bitbucket: string;
+        gitlab: string;
+        gist: string;
+    };
+};
+type SpecAliasField = keyof typeof builtins;
+/**
+ * Throw `ECONFIG` if a spec prefix alias is in more than one of
+ * `registries` / `jsr-registries` / `git-hosts` (built-ins included),
+ * or is a built-in protocol. Overriding a built-in in its own field is ok.
+ */
+export declare const assertSpecAliases: (values: Partial<Record<SpecAliasField, Record<string, string>>>) => void;
+export {};

package/dist/config/spec-aliases.js

@@ -0,0 +1,47 @@
+import { error } from '@vltpkg/error-cause';
+import { builtinProtocols, defaultGitHosts, defaultJsrRegistries, defaultRegistries, } from '@vltpkg/spec';
+const builtins = {
+    registries: defaultRegistries,
+    'jsr-registries': defaultJsrRegistries,
+    'git-hosts': defaultGitHosts,
+};
+const fields = Object.keys(builtins);
+/**
+ * Throw `ECONFIG` if a spec prefix alias is in more than one of
+ * `registries` / `jsr-registries` / `git-hosts` (built-ins included),
+ * or is a built-in protocol. Overriding a built-in in its own field is ok.
+ */
+export const assertSpecAliases = (values) => {
+    const owners = new Map();
+    for (const field of fields) {
+        for (const key of Object.keys(builtins[field])) {
+            if (values[field]?.[key] === undefined) {
+                owners.set(key, { field, builtin: true });
+            }
+        }
+    }
+    for (const field of fields) {
+        for (const key of Object.keys(values[field] ?? {})) {
+            const name = `${field}.${key}`;
+            if (builtinProtocols.has(key)) {
+                throw error(`${name} shadows the built-in \`${key}:\` protocol`, {
+                    code: 'ECONFIG',
+                    name,
+                    found: key,
+                    wanted: 'a name that is not a built-in protocol',
+                });
+            }
+            const owner = owners.get(key);
+            if (owner) {
+                const where = `${owner.field}.${key}${owner.builtin ? ' (built-in)' : ''}`;
+                throw error(`\`${key}:\` spec prefix defined in both ${where} and ${name}`, {
+                    code: 'ECONFIG',
+                    name,
+                    found: key,
+                    wanted: `a ${field} name not used by ${owner.field}`,
+                });
+            }
+            owners.set(key, { field, builtin: false });
+        }
+    }
+};

package/dist/custom-help.js

@@ -183,6 +183,10 @@ const commandHelp = {
         desc: 'Configure your vlt.io account registries',
         defaultOrder: 0,
     },
+    skills: {
+        args: '[list|link]',
+        desc: 'Manage agent skills from installed packages',
+    },
     token: {
         args: '[add|rm]',
         desc: 'Manage authentication tokens',

package/dist/exec-command.js

@@ -14,6 +14,7 @@ import { stderr, stdout, styleTextStdout } from "./output.js";
 import assert from 'node:assert';
 import { resolve } from 'node:path';
 import { createHostContextsMap } from "./query-host-contexts.js";
+import { sortScopeLocations } from "./sort-scope-locations.js";
 const isScriptSet = (o) => {
     if (!o || typeof o !== 'object')
         return false;
@@ -98,11 +99,13 @@ export class ExecCommand {
             this.#defaultIgnoreMissing = true;
             const mainManifest = conf.options.packageJson.maybeRead(this.projectRoot);
             let graph;
+            let monorepo;
             if (mainManifest) {
+                monorepo = Monorepo.load(this.projectRoot);
                 graph = actual.load({
                     ...conf.options,
                     mainManifest,
-                    monorepo: Monorepo.load(this.projectRoot),
+                    monorepo,
                     loadManifests: false,
                 });
             }
@@ -120,14 +123,15 @@ export class ExecCommand {
             const { nodes } = await query.search(queryString, {
                 signal: new AbortController().signal,
             });
-            this.#nodes = [];
+            const locations = [];
             for (const node of nodes) {
                 const { location } = node.toJSON();
                 assert(location, error(`node ${node.id} has no location`, {
                     found: node,
                 }));
-                this.#nodes.push(location);
+                locations.push(location);
             }
+            this.#nodes = sortScopeLocations(locations, monorepo);
         }
         else if (paths?.length || groups?.length || recursive) {
             this.#defaultIgnoreMissing = true;
@@ -163,8 +167,9 @@ export class ExecCommand {
         }
         // run across workspaces
         let failed = false;
-        const runInDir = async (cwd, label) => {
-            const result = await this.bg(this.bgArg(cwd)).catch((er) => {
+        const runInDir = async (cwd, label, signal) => {
+            const arg = { ...this.bgArg(cwd), signal };
+            const result = await this.bg(arg).catch((er) => {
                 if (isErrorWithCause(er) && isRunResult(er.cause)) {
                     this.printResult(label, er.cause);
                 }
@@ -189,7 +194,8 @@ export class ExecCommand {
             }
         }
         else if (this.#monorepo) {
-            const wsResultMap = await this.#monorepo.run(ws => runInDir(ws.fullpath, ws.path));
+            // aborted on the first failure, killing the rest
+            const wsResultMap = await this.#monorepo.run((ws, signal) => runInDir(ws.fullpath, ws.path, signal));
             for (const [ws, result] of wsResultMap) {
                 if (result)
                     resultMap.set(ws.path, result);

package/dist/index.js

@@ -1,5 +1,6 @@
 import { format } from 'node:util';
-import { asRootError } from '@vltpkg/output/error';
+import { asRootError, findRootError } from '@vltpkg/output/error';
+import { setVltJsonOnly } from '@vltpkg/workspaces';
 import { loadPackageJson } from 'package-json-from-dist';
 import { getSortedCliOptions, getSortedKeys, } from "./config/definition.js";
 import { Config } from "./config/index.js";
@@ -12,13 +13,14 @@ const loadVlt = async (cwd, argv) => {
         return await Config.load(cwd, argv);
     }
     catch (e) {
-        const err = asRootError(e, { code: 'JACKSPEAK' });
+        const code = findRootError(e, { code: 'ECONFIG' }) ? 'ECONFIG' : 'JACKSPEAK';
+        const err = asRootError(e, { code });
         const { found, path, wanted, name } = err.cause;
         const isConfigFile = typeof path === 'string';
-        const msg = isConfigFile ?
-            `Problem in Config File ${path}`
-            : 'Invalid Option Flag';
-        const validOptions = wanted ? undefined
+        const msg = isConfigFile ? `Problem in Config File ${path}`
+            : code === 'ECONFIG' ? 'Config Error'
+                : 'Invalid Option Flag';
+        const validOptions = wanted || code === 'ECONFIG' ? undefined
             : isConfigFile ? getSortedKeys()
                 : getSortedCliOptions();
         stderr(msg);
@@ -34,7 +36,10 @@ const loadVlt = async (cwd, argv) => {
             stderr(indent('Valid Options:'));
             stderr(indent(validOptions.join('\n'), 4));
         }
-        stderr(indent(`Run 'vlt help' for more information about available options.`));
+        // `vlt help` would fail the same way
+        if (code !== 'ECONFIG') {
+            stderr(indent(`Run 'vlt help' for more information about available options.`));
+        }
         return flushAndExit(process.exitCode || 1);
     }
 };
@@ -45,6 +50,8 @@ const run = async () => {
     if (vlt.get('version')) {
         return stdout(version);
     }
+    // ci reads workspaces from vlt.json only; set before options load
+    setVltJsonOnly(vlt.command === 'ci');
     const { monorepo } = vlt.options;
     // Infer the workspace by being in that directory.
     if (vlt.get('workspace') === undefined) {
@@ -57,7 +64,10 @@ const run = async () => {
     if (vlt.command !== 'init' &&
         (vlt.get('workspace') || vlt.get('workspace-group')) &&
         ![...(monorepo?.values() ?? [])].length) {
-        stderr(`Error: No matching workspaces found. Make sure the vlt.json config, or the "workspaces" field of the root package.json, contains the correct workspaces.`);
+        const where = vlt.command === 'ci' ?
+            'the vlt.json config (vlt ci ignores package.json and pnpm-workspace.yaml)'
+            : 'the vlt.json config, the "workspaces" field of the root package.json, or the "packages" list of pnpm-workspace.yaml';
+        stderr(`Error: No matching workspaces found. Make sure ${where} contains the correct workspaces.`);
         if (vlt.get('workspace')) {
             stderr(indent(`Workspace: ${format(vlt.get('workspace'))}`));
         }

package/dist/load-command.d.ts

@@ -15,6 +15,8 @@ export type Command<T> = {
      * Set to `true` by commands that hit a registry or resolve registry
      * specs. There is no default registry, so `outputCommand()` fails
      * early with an `ECONFIG` error when one of these runs unconfigured.
+     * `publish`/`unpublish` check in-command instead, since
+     * `publishConfig.registry` may suffice.
      */
     needsRegistry?: boolean;
     /**

package/dist/migrate-workspaces.d.ts

@@ -0,0 +1,16 @@
+import type { WorkspaceConfigSource } from '@vltpkg/workspaces';
+import type { LoadedConfig } from './config/index.ts';
+export type MigratedWorkspaces = {
+    source: WorkspaceConfigSource;
+    workspaces: string[];
+};
+/**
+ * Save workspaces read from `package.json` or `pnpm-workspace.yaml` to
+ * the project `vlt.json`, unless `--no-migrate-workspaces`.
+ */
+export declare const migrateWorkspaces: (conf: LoadedConfig) => MigratedWorkspaces | undefined;
+/**
+ * Warn when workspaces are declared only outside `vlt.json`, which
+ * `vlt ci` ignores.
+ */
+export declare const warnIgnoredWorkspaces: (conf: LoadedConfig) => void;

package/dist/migrate-workspaces.js

@@ -0,0 +1,44 @@
+import { save } from '@vltpkg/vlt-json';
+import { migratableWSConfig, resolveWSConfig, } from '@vltpkg/workspaces';
+import { stderr } from "./output.js";
+// workspaces declared outside vlt.json, if any
+const found = (conf) => {
+    const resolved = resolveWSConfig(conf.options.projectRoot, conf.options.packageJson, false);
+    const workspaces = migratableWSConfig(resolved);
+    const { source } = resolved;
+    if (!workspaces?.length || !source)
+        return;
+    return { source, workspaces };
+};
+/**
+ * Save workspaces read from `package.json` or `pnpm-workspace.yaml` to
+ * the project `vlt.json`, unless `--no-migrate-workspaces`.
+ */
+export const migrateWorkspaces = (conf) => {
+    if (!conf.options['migrate-workspaces'])
+        return;
+    const migrated = found(conf);
+    if (migrated)
+        save('workspaces', migrated.workspaces);
+    return migrated;
+};
+/**
+ * Warn when workspaces are declared only outside `vlt.json`, which
+ * `vlt ci` ignores.
+ */
+export const warnIgnoredWorkspaces = (conf) => {
+    const { loglevel } = conf.values;
+    if (loglevel === 'silent' || loglevel === 'error')
+        return;
+    let migrated;
+    try {
+        migrated = found(conf);
+    }
+    catch {
+        // invalid workspaces config: nothing to suggest
+        return;
+    }
+    if (!migrated)
+        return;
+    stderr(`Warning: vlt ci reads workspaces from vlt.json only; ignoring ${migrated.source}, its workspaces are not installed. Run \`vlt install\` to save them to vlt.json, or add them there.`);
+};

package/dist/output.js

@@ -227,6 +227,7 @@ export const outputCommand = async (cliCommand, conf, { start, vltVersion } = {
             ...formatOptions,
             colors: stderrColor,
         });
-        await flushAndExit(process.exitCode);
+        // stop pending requests, so the process can exit on its own
+        conf.abort();
     }
 };

package/dist/print-err.js

@@ -223,8 +223,11 @@ const printCode = (err, usage, stderr, format) => {
             return {};
         }
         case 'ECONFIG': {
-            const { found, wanted, validOptions } = err.cause;
+            const { found, wanted, validOptions, from } = err.cause;
             stderr(`Config Error: ${err.message}`);
+            if (from) {
+                stderr(indent(`From: ${format(from)}`));
+            }
             if (found) {
                 stderr(indent(`Found: ${format(found)}`));
             }

package/dist/publish-config.d.ts

@@ -0,0 +1,9 @@
+import type { NormalizedManifest } from '@vltpkg/types';
+type PublishConfig = {
+    directory?: string;
+    registry?: string;
+    access?: string;
+    tag?: string;
+};
+export declare const getPublishConfig: (manifest: NormalizedManifest) => PublishConfig | undefined;
+export {};

package/dist/publish-config.js

@@ -0,0 +1,8 @@
+export const getPublishConfig = (manifest) => {
+    const pc = manifest
+        .publishConfig;
+    if (pc && typeof pc === 'object') {
+        return pc;
+    }
+    return undefined;
+};