vercel-cli 41.1.0__py3-none-any.whl → 46.1.1__py3-none-any.whl

vercel_cli/vendor/node_modules/@vercel/build-utils/dist/fs/run-user-scripts.js

@@ -28,6 +28,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var run_user_scripts_exports = {};
 __export(run_user_scripts_exports, {
+  PNPM_10_PREFERRED_AT: () => PNPM_10_PREFERRED_AT,
   detectPackageManager: () => detectPackageManager,
   execCommand: () => execCommand,
   getEnvForPackageManager: () => getEnvForPackageManager,
@@ -67,7 +68,7 @@ var import_node_version = require("./node-version");
 var import_read_config_file = require("./read-config-file");
 var import_clone_env = require("../clone-env");
 var import_json5 = __toESM(require("json5"));
-const runNpmInstallSema = new import_async_sema.default(1);
+var import_js_yaml = __toESM(require("js-yaml"));
 const NO_OVERRIDE = {
   detectedLockfile: void 0,
   detectedPackageManager: void 0,
@@ -238,14 +239,24 @@ async function scanParentDirs(destPath, readPackageJson = false, base = "/") {
     start: destPath,
     filename: "package.json"
   });
-  const packageJson = readPackageJson && pkgJsonPath ? JSON.parse(await import_fs_extra.default.readFile(pkgJsonPath, "utf8")) : void 0;
+  let packageJson;
+  if (readPackageJson && pkgJsonPath) {
+    try {
+      packageJson = JSON.parse(await import_fs_extra.default.readFile(pkgJsonPath, "utf8"));
+    } catch (err) {
+      throw new Error(
+        `Could not read ${pkgJsonPath}: ${err.message}.`
+      );
+    }
+  }
   const {
     paths: [
       yarnLockPath,
       npmLockPath,
       pnpmLockPath,
       bunLockTextPath,
-      bunLockBinPath
+      bunLockBinPath,
+      vltLockPath
     ],
     packageJsonPackageManager
   } = await walkParentDirsMulti({
@@ -256,18 +267,20 @@ async function scanParentDirs(destPath, readPackageJson = false, base = "/") {
       "package-lock.json",
       "pnpm-lock.yaml",
       "bun.lock",
-      "bun.lockb"
+      "bun.lockb",
+      "vlt-lock.json"
     ]
   });
   let lockfilePath;
   let lockfileVersion;
   let cliType;
   const bunLockPath = bunLockTextPath ?? bunLockBinPath;
-  const [hasYarnLock, packageLockJson, pnpmLockYaml, bunLock] = await Promise.all([
-    Boolean(yarnLockPath),
+  const [packageLockJson, pnpmLockYaml, bunLock, yarnLock, vltLock] = await Promise.all([
     npmLockPath ? (0, import_read_config_file.readConfigFile)(npmLockPath) : null,
     pnpmLockPath ? (0, import_read_config_file.readConfigFile)(pnpmLockPath) : null,
-    bunLockPath ? import_fs_extra.default.readFile(bunLockPath) : null
+    bunLockPath ? import_fs_extra.default.readFile(bunLockPath) : null,
+    yarnLockPath ? import_fs_extra.default.readFile(yarnLockPath, "utf8") : null,
+    vltLockPath ? (0, import_read_config_file.readConfigFile)(vltLockPath) : null
   ]);
   const rootProjectInfo = readPackageJson ? await readProjectRootInfo({
     base,
@@ -278,13 +291,14 @@ async function scanParentDirs(destPath, readPackageJson = false, base = "/") {
     turboVersionRange,
     rootProjectInfo?.rootDir
   ) : void 0;
-  if (bunLock && hasYarnLock) {
+  if (bunLock && yarnLock) {
     cliType = "bun";
     lockfilePath = bunLockPath;
     lockfileVersion = bunLockTextPath ? 1 : 0;
-  } else if (hasYarnLock) {
+  } else if (yarnLock) {
     cliType = "yarn";
     lockfilePath = yarnLockPath;
+    lockfileVersion = parseYarnLockVersion(yarnLock);
   } else if (pnpmLockYaml) {
     cliType = "pnpm";
     lockfilePath = pnpmLockPath;
@@ -297,6 +311,9 @@ async function scanParentDirs(destPath, readPackageJson = false, base = "/") {
     cliType = "bun";
     lockfilePath = bunLockPath;
     lockfileVersion = bunLockTextPath ? 1 : 0;
+  } else if (vltLock) {
+    cliType = "vlt";
+    lockfilePath = vltLockPath;
   } else {
     cliType = detectPackageManagerNameWithoutLockfile(
       packageJsonPackageManager,
@@ -314,6 +331,17 @@ async function scanParentDirs(destPath, readPackageJson = false, base = "/") {
     turboSupportsCorepackHome
   };
 }
+function parseYarnLockVersion(yarnLock) {
+  if (!yarnLock.includes("__metadata:")) {
+    return 1;
+  }
+  try {
+    const metadata = import_js_yaml.default.load(yarnLock).__metadata;
+    return Number(metadata.version);
+  } catch {
+    return void 0;
+  }
+}
 async function checkTurboSupportsCorepack(turboVersionRange, rootDir) {
   if (turboVersionSpecifierSupportsCorepack(turboVersionRange)) {
     return true;
@@ -423,7 +451,64 @@ async function walkParentDirsMulti({
 function isSet(v) {
   return v?.constructor?.name === "Set";
 }
-async function runNpmInstall(destPath, args = [], spawnOpts, meta, nodeVersion) {
+function getInstallCommandForPackageManager(packageManager, args) {
+  switch (packageManager) {
+    case "npm":
+      return {
+        prettyCommand: "npm install",
+        commandArguments: args.filter((a) => a !== "--prefer-offline").concat(["install", "--no-audit", "--unsafe-perm"])
+      };
+    case "pnpm":
+      return {
+        prettyCommand: "pnpm install",
+        // PNPM's install command is similar to NPM's but without the audit nonsense
+        // @see options https://pnpm.io/cli/install
+        commandArguments: args.filter((a) => a !== "--prefer-offline").concat(["install", "--unsafe-perm"])
+      };
+    case "bun":
+      return {
+        prettyCommand: "bun install",
+        // @see options https://bun.sh/docs/cli/install
+        commandArguments: ["install", ...args]
+      };
+    case "yarn":
+      return {
+        prettyCommand: "yarn install",
+        commandArguments: ["install", ...args]
+      };
+    case "vlt":
+      return {
+        prettyCommand: "vlt install",
+        commandArguments: ["install", ...args]
+      };
+  }
+}
+async function runInstallCommand({
+  packageManager,
+  args,
+  opts
+}) {
+  const { commandArguments, prettyCommand } = getInstallCommandForPackageManager(packageManager, args);
+  opts.prettyCommand = prettyCommand;
+  if (process.env.NPM_ONLY_PRODUCTION) {
+    commandArguments.push("--production");
+  }
+  await spawnAsync(packageManager, commandArguments, opts);
+}
+function initializeSet(set) {
+  if (!isSet(set)) {
+    return /* @__PURE__ */ new Set();
+  }
+  return set;
+}
+function checkIfAlreadyInstalled(runNpmInstallSet, packageJsonPath) {
+  const initializedRunNpmInstallSet = initializeSet(runNpmInstallSet);
+  const alreadyInstalled = initializedRunNpmInstallSet.has(packageJsonPath);
+  initializedRunNpmInstallSet.add(packageJsonPath);
+  return { alreadyInstalled, runNpmInstallSet: initializedRunNpmInstallSet };
+}
+const runNpmInstallSema = new import_async_sema.default(1);
+async function runNpmInstall(destPath, args = [], spawnOpts, meta, nodeVersion, projectCreatedAt) {
   if (meta?.isDev) {
     (0, import_debug.default)("Skipping dependency installation because dev mode is enabled");
     return false;
@@ -443,19 +528,27 @@ async function runNpmInstall(destPath, args = [], spawnOpts, meta, nodeVersion)
       (0, import_debug.default)(
         `Skipping dependency installation because no package.json was found for ${destPath}`
       );
-      runNpmInstallSema.release();
       return false;
     }
-    if (meta && packageJsonPath && args.length === 0) {
-      if (!isSet(meta.runNpmInstallSet)) {
-        meta.runNpmInstallSet = /* @__PURE__ */ new Set();
+    const defaultInstall = args.length === 0;
+    if (meta && packageJsonPath && defaultInstall) {
+      const { alreadyInstalled, runNpmInstallSet } = checkIfAlreadyInstalled(
+        meta.runNpmInstallSet,
+        packageJsonPath
+      );
+      if (alreadyInstalled) {
+        return false;
       }
-      if (isSet(meta.runNpmInstallSet)) {
-        if (meta.runNpmInstallSet.has(packageJsonPath)) {
-          return false;
-        } else {
-          meta.runNpmInstallSet.add(packageJsonPath);
-        }
+      meta.runNpmInstallSet = runNpmInstallSet;
+    }
+    if (cliType === "yarn") {
+      const yarnVersion = detectYarnVersion(lockfileVersion);
+      if (["yarn@3.x", "yarn@4.x"].includes(yarnVersion)) {
+        await spawnAsync(
+          "yarn",
+          ["config", "set", "enableGlobalCache", "false"],
+          { cwd: destPath }
+        );
       }
     }
     const installTime = Date.now();
@@ -471,47 +564,20 @@ async function runNpmInstall(destPath, args = [], spawnOpts, meta, nodeVersion)
       nodeVersion,
       env,
       packageJsonEngines: packageJson?.engines,
-      turboSupportsCorepackHome
+      turboSupportsCorepackHome,
+      projectCreatedAt
     });
-    let commandArgs;
-    const isPotentiallyBrokenNpm = cliType === "npm" && (nodeVersion?.major === 16 || opts.env.PATH?.includes("/node16/bin-npm7")) && !args.includes("--legacy-peer-deps") && spawnOpts?.env?.ENABLE_EXPERIMENTAL_COREPACK !== "1";
-    if (cliType === "npm") {
-      opts.prettyCommand = "npm install";
-      commandArgs = args.filter((a) => a !== "--prefer-offline").concat(["install", "--no-audit", "--unsafe-perm"]);
-      if (isPotentiallyBrokenNpm && spawnOpts?.env?.VERCEL_NPM_LEGACY_PEER_DEPS === "1") {
-        commandArgs.push("--legacy-peer-deps");
-      }
-    } else if (cliType === "pnpm") {
-      opts.prettyCommand = "pnpm install";
-      commandArgs = args.filter((a) => a !== "--prefer-offline").concat(["install", "--unsafe-perm"]);
-    } else if (cliType === "bun") {
-      opts.prettyCommand = "bun install";
-      commandArgs = ["install", ...args];
-    } else {
-      opts.prettyCommand = "yarn install";
-      commandArgs = ["install", ...args];
-    }
-    if (process.env.NPM_ONLY_PRODUCTION) {
-      commandArgs.push("--production");
-    }
-    try {
-      await spawnAsync(cliType, commandArgs, opts);
-    } catch (err) {
-      const potentialErrorPath = import_path.default.join(
-        process.env.HOME || "/",
-        ".npm",
-        "eresolve-report.txt"
+    const maySeeDynamicRequireYarnBug = process.env?.ENABLE_EXPERIMENTAL_COREPACK && packageJson?.packageManager?.startsWith("yarn") && packageJson?.type === "module";
+    if (maySeeDynamicRequireYarnBug) {
+      console.warn(
+        `Warning: This project may see "Error: Dynamic require of "util" is not supported". To avoid this error, remove \`"type": "module"\` from your package.json file, or use \`yarnPath\` instead of Corepack. Learn more: https://vercel.com/docs/errors/error-list#yarn-dynamic-require-of-util-is-not-supported`
       );
-      if (isPotentiallyBrokenNpm && !commandArgs.includes("--legacy-peer-deps") && import_fs_extra.default.existsSync(potentialErrorPath)) {
-        console.warn(
-          'Warning: Retrying "Install Command" with `--legacy-peer-deps` which may accept a potentially broken dependency and slow install time.'
-        );
-        commandArgs.push("--legacy-peer-deps");
-        await spawnAsync(cliType, commandArgs, opts);
-      } else {
-        throw err;
-      }
     }
+    await runInstallCommand({
+      packageManager: cliType,
+      args,
+      opts
+    });
     (0, import_debug.default)(`Install complete [${Date.now() - installTime}ms]`);
     return true;
   } finally {
@@ -525,7 +591,8 @@ function getEnvForPackageManager({
   nodeVersion,
   env,
   packageJsonEngines,
-  turboSupportsCorepackHome
+  turboSupportsCorepackHome,
+  projectCreatedAt
 }) {
   const corepackEnabled = usingCorepack(
     env,
@@ -542,7 +609,8 @@ function getEnvForPackageManager({
     corepackPackageManager: packageJsonPackageManager,
     nodeVersion,
     corepackEnabled,
-    packageJsonEngines
+    packageJsonEngines,
+    projectCreatedAt
   });
   if (corepackEnabled) {
     (0, import_debug.default)(
@@ -564,10 +632,26 @@ function getEnvForPackageManager({
     const oldPath = env.PATH + "";
     newEnv.PATH = `${newPath}${import_path.default.delimiter}${oldPath}`;
     if (detectedLockfile && detectedPackageManager) {
-      const versionString = cliType === "pnpm" ? `version ${lockfileVersion} ` : "";
-      console.log(
-        `Detected \`${detectedLockfile}\` ${versionString}generated by ${detectedPackageManager}`
-      );
+      const detectedV9PnpmLockfile = detectedLockfile === "pnpm-lock.yaml" && lockfileVersion === 9;
+      const pnpm10UsingPackageJsonPackageManager = detectedPackageManager === "pnpm@10.x" && packageJsonPackageManager;
+      if (pnpm10UsingPackageJsonPackageManager) {
+        const versionString = cliType === "pnpm" ? `version ${lockfileVersion} ` : "";
+        console.log(
+          `Detected \`${detectedLockfile}\` ${versionString}generated by ${detectedPackageManager} with package.json#packageManager ${packageJsonPackageManager}`
+        );
+      } else if (detectedV9PnpmLockfile) {
+        const otherVersion = detectedPackageManager === "pnpm@10.x" ? `pnpm@9.x` : `pnpm@10.x`;
+        console.log(
+          `Detected \`${detectedLockfile}\` ${lockfileVersion} which may be generated by pnpm@9.x or pnpm@10.x
+Using ${detectedPackageManager} based on project creation date
+To use ${otherVersion}, manually opt in using corepack (https://vercel.com/docs/deployments/configure-a-build#corepack)`
+        );
+      } else {
+        const versionString = cliType === "pnpm" ? `version ${lockfileVersion} ` : "";
+        console.log(
+          `Detected \`${detectedLockfile}\` ${versionString}generated by ${detectedPackageManager}`
+        );
+      }
       if (cliType === "bun") {
         console.warn(
           "Warning: Bun is used as a package manager at build time only, not at runtime with Functions"
@@ -580,7 +664,8 @@ function getEnvForPackageManager({
   }
   return newEnv;
 }
-function detectPnpmVersion(lockfileVersion) {
+const PNPM_10_PREFERRED_AT = /* @__PURE__ */ new Date("2025-02-27T20:00:00Z");
+function detectPnpmVersion(lockfileVersion, projectCreatedAt) {
   switch (true) {
     case lockfileVersion === void 0:
       return "not found";
@@ -590,21 +675,42 @@ function detectPnpmVersion(lockfileVersion) {
       return "pnpm 7";
     case (lockfileVersion === 6 || lockfileVersion === 6.1):
       return "pnpm 8";
-    case (lockfileVersion === 7 || lockfileVersion === 9):
+    case lockfileVersion === 7:
       return "pnpm 9";
+    case lockfileVersion === 9: {
+      const projectPrefersPnpm10 = projectCreatedAt && projectCreatedAt >= PNPM_10_PREFERRED_AT.getTime();
+      return projectPrefersPnpm10 ? "pnpm 10" : "pnpm 9";
+    }
     default:
       return "not found";
   }
 }
+function detectYarnVersion(lockfileVersion) {
+  if (lockfileVersion) {
+    if ([1].includes(lockfileVersion)) {
+      return "yarn@1.x";
+    } else if ([4, 5].includes(lockfileVersion)) {
+      return "yarn@2.x";
+    } else if ([6, 7].includes(lockfileVersion)) {
+      return "yarn@3.x";
+    } else if ([8].includes(lockfileVersion)) {
+      return "yarn@4.x";
+    }
+  }
+  return "unknown yarn";
+}
 function validLockfileForPackageManager(cliType, lockfileVersion, packageManagerVersion) {
   const packageManagerMajorVersion = packageManagerVersion.major;
   switch (cliType) {
     case "npm":
     case "bun":
     case "yarn":
+    case "vlt":
       return true;
     case "pnpm":
       switch (packageManagerMajorVersion) {
+        case 10:
+          return lockfileVersion === 9;
         case 9:
           if ("9.0.0" === packageManagerVersion.version && lockfileVersion === 6) {
             return false;
@@ -626,25 +732,34 @@ function getPathOverrideForPackageManager({
   lockfileVersion,
   corepackPackageManager,
   corepackEnabled = true,
-  packageJsonEngines
+  packageJsonEngines,
+  projectCreatedAt
 }) {
-  const detectedPackageManger = detectPackageManager(cliType, lockfileVersion);
-  if (!corepackPackageManager || !corepackEnabled) {
-    if (cliType === "pnpm" && packageJsonEngines?.pnpm) {
+  const detectedPackageManger = detectPackageManager(
+    cliType,
+    lockfileVersion,
+    projectCreatedAt
+  );
+  const usingCorepack2 = corepackPackageManager && corepackEnabled;
+  if (usingCorepack2) {
+    validateCorepackPackageManager(
+      cliType,
+      lockfileVersion,
+      corepackPackageManager,
+      packageJsonEngines?.pnpm
+    );
+    return NO_OVERRIDE;
+  }
+  if (cliType === "pnpm" && packageJsonEngines?.pnpm) {
+    const usingDetected = detectedPackageManger?.pnpmVersionRange !== "10.x" || !corepackPackageManager;
+    if (usingDetected) {
       checkEnginesPnpmAgainstDetected(
         packageJsonEngines.pnpm,
         detectedPackageManger
       );
     }
-    return detectedPackageManger ?? NO_OVERRIDE;
   }
-  validateCorepackPackageManager(
-    cliType,
-    lockfileVersion,
-    corepackPackageManager,
-    packageJsonEngines?.pnpm
-  );
-  return NO_OVERRIDE;
+  return detectedPackageManger ?? NO_OVERRIDE;
 }
 function checkEnginesPnpmAgainstDetected(enginesPnpm, detectedPackageManger) {
   if (detectedPackageManger?.pnpmVersionRange && (0, import_semver.validRange)(detectedPackageManger.pnpmVersionRange) && (0, import_semver.validRange)(enginesPnpm)) {
@@ -719,12 +834,12 @@ function validateVersionSpecifier(version) {
     packageVersion
   };
 }
-function detectPackageManager(cliType, lockfileVersion) {
+function detectPackageManager(cliType, lockfileVersion, projectCreatedAt) {
   switch (cliType) {
     case "npm":
       return void 0;
     case "pnpm":
-      switch (detectPnpmVersion(lockfileVersion)) {
+      switch (detectPnpmVersion(lockfileVersion, projectCreatedAt)) {
         case "pnpm 7":
           return {
             path: "/pnpm7/node_modules/.bin",
@@ -746,10 +861,16 @@ function detectPackageManager(cliType, lockfileVersion) {
             detectedPackageManager: "pnpm@9.x",
             pnpmVersionRange: "9.x"
           };
+        case "pnpm 10":
+          return {
+            path: "/pnpm10/node_modules/.bin",
+            detectedLockfile: "pnpm-lock.yaml",
+            detectedPackageManager: "pnpm@10.x",
+            pnpmVersionRange: "10.x"
+          };
         case "pnpm 6":
           return {
-            // undefined because pnpm@6 is the current default in the build container
-            path: void 0,
+            path: "/pnpm6/node_modules/.bin",
             detectedLockfile: "pnpm-lock.yaml",
             detectedPackageManager: "pnpm@6.x",
             pnpmVersionRange: "6.x"
@@ -767,7 +888,13 @@ function detectPackageManager(cliType, lockfileVersion) {
       return {
         path: void 0,
         detectedLockfile: "yarn.lock",
-        detectedPackageManager: "yarn"
+        detectedPackageManager: detectYarnVersion(lockfileVersion)
+      };
+    case "vlt":
+      return {
+        path: void 0,
+        detectedLockfile: "vlt-lock.json",
+        detectedPackageManager: "vlt@0.x"
       };
   }
 }
@@ -809,7 +936,8 @@ async function runCustomInstallCommand({
   destPath,
   installCommand,
   nodeVersion,
-  spawnOpts
+  spawnOpts,
+  projectCreatedAt
 }) {
   console.log(`Running "install" command: \`${installCommand}\`...`);
   const {
@@ -826,7 +954,8 @@ async function runCustomInstallCommand({
     nodeVersion,
     env: spawnOpts?.env || {},
     packageJsonEngines: packageJson?.engines,
-    turboSupportsCorepackHome
+    turboSupportsCorepackHome,
+    projectCreatedAt
   });
   (0, import_debug.default)(`Running with $PATH:`, env?.PATH || "");
   await execCommand(installCommand, {
@@ -835,7 +964,7 @@ async function runCustomInstallCommand({
     cwd: destPath
   });
 }
-async function runPackageJsonScript(destPath, scriptNames, spawnOpts) {
+async function runPackageJsonScript(destPath, scriptNames, spawnOpts, projectCreatedAt) {
   (0, import_assert.default)(import_path.default.isAbsolute(destPath));
   const {
     packageJson,
@@ -862,7 +991,8 @@ async function runPackageJsonScript(destPath, scriptNames, spawnOpts) {
       nodeVersion: void 0,
       env: (0, import_clone_env.cloneEnv)(process.env, spawnOpts?.env),
       packageJsonEngines: packageJson?.engines,
-      turboSupportsCorepackHome
+      turboSupportsCorepackHome,
+      projectCreatedAt
     })
   };
   if (cliType === "npm") {
@@ -871,6 +1001,8 @@ async function runPackageJsonScript(destPath, scriptNames, spawnOpts) {
     opts.prettyCommand = `pnpm run ${scriptName}`;
   } else if (cliType === "bun") {
     opts.prettyCommand = `bun run ${scriptName}`;
+  } else if (cliType === "vlt") {
+    opts.prettyCommand = `vlt run ${scriptName}`;
   } else {
     opts.prettyCommand = `yarn run ${scriptName}`;
   }
@@ -917,6 +1049,7 @@ const installDependencies = (0, import_util.deprecate)(
 );
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  PNPM_10_PREFERRED_AT,
   detectPackageManager,
   execCommand,
   getEnvForPackageManager,

vercel_cli/vendor/node_modules/@vercel/build-utils/dist/get-prefixed-env-vars.js

@@ -29,9 +29,12 @@ function getPrefixedEnvVars({
   const allowed = [
     "VERCEL_URL",
     "VERCEL_ENV",
+    "VERCEL_TARGET_ENV",
     "VERCEL_REGION",
     "VERCEL_BRANCH_URL",
-    "VERCEL_PROJECT_PRODUCTION_URL"
+    "VERCEL_PROJECT_PRODUCTION_URL",
+    "VERCEL_DEPLOYMENT_ID",
+    "VERCEL_PROJECT_ID"
   ];
   const newEnvs = {};
   if (envPrefix && envs.VERCEL_URL) {